Personal Data Protection Compliance Undertakings

1. The Company hereby represents, undertakes and warrants to Singapore Life Ltd. (“Singlife”) that:

(a) for any personal data of individuals that the Company will be or is disclosing to Singlife, whether directly or through an intermediary, that the Company would have prior to disclosing such personal data to Singlife obtained the appropriate consent from the individuals whose personal data are being disclosed, to:

(i) permit the Company to collect, use and/or disclose the individuals’ personal data to Singlife for the purpose of issuance, administration and servicing of the Company’s insurance policy(ies) and/or account(s) with Singlife, including the processing of the individuals’ personal data for underwriting purposes, payment of premiums and/or claims purposes,  for statistical, compliance, audit and regulatory purposes and for providing general information on product enhancements and services, which are relevant to the individual’s needs or policies (including increasing benefits and/or insured lives);

(ii) permit Singlife and Singlife related group of companies (in Singapore and/or elsewhere) to collect, use, disclose and/or process the individuals’ personal data for the purpose of issuance, administration and servicing of the Company’s insurance policy(ies) or such other policy(ies) and/or account(s) with Singlife, including but not limited to the processing of the individuals’ personal data for underwriting purposes, payment of premiums and/or claims purposes, for statistical, compliance, audit and regulatory purposes and for providing general information on product enhancements and services, which are relevant to the individual’s needs or policies (including increasing benefits and/or insured lives); and

(iii) permit Singlife to disclose the individuals’ personal data to Singlife group of companies, third party service providers, suppliers, reinsurers or intermediaries, whether located in Singapore and/or elsewhere, for the purposes as described above;

(b) any personal data of individuals that the Company will be or is disclosing to Singlife are accurate. Further, the Company shall give Singlife notice in writing as soon as reasonably practicable should it be aware that any such personal data has been updated and/or changed after such disclosure;

(c) it shall give Singlife notice in writing as soon as reasonably practicable should it be aware that any individual above has withdrawn such consent as set out at sub-clause (a); and

(d) it shall otherwise assist Singlife to comply with the Personal Data Protection Act 2012 and all subsidiary legislation related thereto.

2. Notwithstanding anything to the contrary, the Company undertakes to indemnify and at all times hereafter to keep Singlife and Singlife related group of companies (together with their respective officers, employees and agents) (each an “Injured Party”) indemnified against any and all losses, damages, actions, proceedings, costs, claims, demands, liabilities (including full legal costs on a solicitor and own client basis) which may be suffered or incurred by the Injured Party or asserted against the Injured Party by any person or entity (including Company, his/her agents) whatsoever, in respect of any matter or event whatsoever arising out of, in the course of, by reason of or in respect of:

(a) any breach of any of the provisions in this clause; and/or

(b) any action or omission by the Company, that causes Singlife and/or any of Singlife related group of companies to be in breach of the PDPA.