Employee Privacy Policy

Overview

This Employee Privacy Policy (“Privacy Policy”) explains what types of personal information, also referred to as personal data, we may collect about our employees, job applicants, and candidates and how it may be used.

In this Privacy Policy the terms “Illumina,” “we,” ”us,” and “our” refers to Illumina, Inc. and its affiliates and subsidiaries globally.

While this Privacy Policy is intended to describe the broadest range of our information processing activities globally, those processing activities may be more limited in some jurisdictions based on the restrictions of their laws. For example, the laws of a particular country may limit the types of personal information we can collect or the manner in which we process that information. In those instances, we adjust our internal policies and practices to reflect the requirements of local law.

Illumina is a Global Company Headquartered in the U.S.

Illumina is a global company with its headquarters in the U.S. To facilitate Illumina’s global operations, Illumina may transfer and access personal information from around the world, including from other countries in which it has operations. A list of Illumina’s global offices is available at www.illumina.com for reference. This means that personal information may be used, processed, and transferred to the United States and other countries or territories and those countries or territories may not offer the same level of data protection as the country where you reside, including the European Economic Area.

Applicability of Other Illumina Privacy Policies

The website of Illumina (www.illumina.com) may have separate privacy policies and terms of use that apply to their use. Additionally, some of our products and services may have separate privacy policies and terms of use that apply to their use. Any personal information of you collected in connection with your use of those websites or products and services are not subject to this Privacy Policy.

If you are unsure how or if this Privacy Policy applies to you, please contact your Human Resourcesrepresentative.

Third Party Services

In some cases, you may provide personal information to third parties with which Illumina works. This could be, for example, a third-party website where you can apply for a job at Illumina, can take advantage of services made available to our employees, or can manage stocks. The use of such third-party websites may be governed by separate terms of use and privacy policies which are not under our control and are not subject to this Privacy Policy. Please contact such third parties for questions regarding their privacy practices, as well as if you would like to have them delete your personal information.

What is Personal Information?

Personal information, also known as personally identifiable information or personal data, for purposes of this Privacy Policy means any information that (i) directly and clearly identifies an individual, or (ii) can be used in combination with other information to identify an individual.

Personal information does not include such information if it is anonymous or if it has been rendered de-identified by removing personal identifiers.

Examples of personal information include:

• An individual’s name
• An individual’s photograph.
• Employee ID number.
• Home address.
• Home phone number.
• Personal email address.
• Names of family members.
• Date of birth.

What is Sensitive Personal Information?

Sensitive personal information is a subset of personal information that may be more sensitive in nature for the individual concerned.

• Race and ethnic information.
• Sexual orientation.
• Political/religious beliefs.
• Social security or other taxpayer/government issued identification numbers.
• Financial information.
• Health or medical information.
• Criminal records.
• And in some regions, such as the European Union, trade union membership.

What Personal Information Do We Collect?

We collect and maintain different types of personal information about you in accordance with applicable law. Some examples include:

• Name, gender, home address and telephone number, date of birth, marital status, employee identification number, and emergency contacts.
• Residency and work permit status, military status, nationality and passport information.
• Social security or other taxpayer/government identification number.
• Payroll information, banking details.
• Wage and benefit information.
• Retirement account information.
• Sick pay, Paid Time Off (“PTO”), retirement accounts, pensions, insurance and other benefits information (including the gender, age, nationality and passport information for any spouse, minor children or other eligible dependents and beneficiaries).
• Information from interviews and phone-screenings you may have had, if any.
• Date of hire, date(s) of promotions(s), work history, technical skills, educational background, professional certifications and registrations, language capabilities, and training records.
• Employee stock information.
• Beneficiary and emergency contact information.
• Forms and information relating to the application for, or in respect of changes to, employee health and welfare benefits; including, short and long term disability, medical and dental care, etc.
• Height, weight and clothing sizes, photograph, videos, physical limitations and special needs.
• Records of work absences, vacation/paid time off, entitlement and requests, salary history and expectations, performance appraisals, letters of appreciation and commendation, and disciplinary and grievance procedures (including monitoring compliance with and enforcing our policies).
• Where permitted by law and applicable we may collect the results of credit and criminal background checks, the results of drug and alcohol testing, screening, health certifications, driving license number, vehicle registration and driving history.
• Information required for us to comply with laws, the requests and directions of law enforcement authorities or court orders (e.g., child support and debt payment information).
• Acknowledgements regarding our policies, including employee handbooks, ethics and/or conflicts of interest policies and computer and other corporate resource usage policies.
• Information captured on security systems, including Closed Circuit Television (“CCTV”) and key card entry systems.
• Voicemails, e-mails, correspondence, documents, and other work product and communications created, stored or transmitted using our networks, applications, devices, computers or communications equipment.
• Date of resignation or termination, reason for resignation or termination, information relating to administering termination of employment (e.g. references).
• Letters of offer and acceptance of employment.
• Your resume or CV, cover letter, previous and/or relevant work experience or other experience, education, transcripts, or other information you provide to us in support of an application and/or the application and recruitment process.
• References and interview notes.
• Information relating to any previous applications you may have made to Illumina and/or any previous employment history with Illumina.

How Collected?

Generally, we collect personal information directly from you in circumstances where you provide personal information (e.g., during the onboarding process, signing up for direct deposit, enrolling in benefits or services). However, in some instances, the personal information we collect has been inferred about you based on other information you provide us, through your interactions with us, or from third parties. When we collect your personal information from third parties it is either because you have given us express permission to do so, your permission was implied by your actions (e.g., your use of a third-party employee service made available to you by us), or because you provided explicit or implicit permission to the third party to provide the personal information to us

Where permitted or required by applicable law or regulatory requirements, we may collect personal information about you without your knowledge or consent.

We reserve the right to monitor the use of our premises, equipment, devices, computers, network, applications, software, and similar assets and resources. In the event such monitoring occurs, it may result in the collection of personal information about you. This monitoring may include the use of CCTV cameras in and around our premises.

How We Use the Personal Information We Collect

Illumina may use your personal information in order:

• To manage all aspects of an employee’s employment relationship, including, but not limited to the establishment, maintenance, and termination of employment relationships. Examples of activities related to this include: determining eligibility for initial employment, including the verification of references and qualifications; pay and benefit administration; the issuance and management of stock options and restricted stock units; corporate travel and other reimbursable expenses; development and training; absence monitoring; project management; auditing, compliance, and risk management activities; conflict of interest reporting; employee communications; performance evaluation; disciplinary actions; grievance and internal investigation activities; career management, including the assessment of qualifications for a particular job or task; processing employee work-related claims (e.g., worker compensation, insurance claims); succession planning; relocation assistance; obtaining and maintaining insurance; the provision of employee related services; and other general operations, administrative, financial, and human resources related purposes.
• Assisting you with obtaining an immigration visa or work permit where required.
• For use in video conferencing.
• Maintain directories of employees.
• For employee engagement programs, including surveys.
• Administer our occupational safety and health programs.
• To protect the safety and security of our workforce, guests, property, and assets (including controlling and facilitating access to and monitoring activity on and in our premises and activity using our computers, devices, networks, communications and other assets and resources).
• To investigate and respond to claims against us.
• To maintain emergency contact and beneficiary details.
• To comply with applicable laws (e.g. health and safety, employment laws, office of foreign asset controls regulations, tax laws), including judicial or administrative orders regarding individual employees (e.g., garnishments, child support payments).
• Carry out any additional purposes that we advise you of (if applicable law requires your express consent for such additional use or disclosure we will obtain it from you).
• Carry out other purposes as part of our business activities when reasonably required by us.

Sharing Personal Information

Your personal information may be shared, including to our affiliates, subsidiaries, and other third parties, as follows:

• Where you request us or provide your consent to us.
• In order to carry out the uses of personal information described above (see, How We Use the Personal Information We Collect).
• When using or collaborating with third parties in the operation of our business, including in connection with providing many of the benefits and services we offer our employees (e.g., Human Resources Information Systems, Financial Investment service providers, wellness program service providers, insurance providers). When we share personal information with third parties we require that they only use or disclose such personal information only as necessary to provide the requested services to us and in a manner consistent with the use and disclosure provisions of this Privacy Policy and applicable law.
• We may buy or sell businesses and other assets. In such transactions, employee information is generally one of the transferred business assets and we reserve the right to include your personal information as an asset in any such transfer. Also, in the event that we, or substantially all of our assets, are acquired, your personal information may be one of the transferred assets.
• Where required by law, by order or requirement of a court, administrative agency, or government tribunal, which includes in response to a lawful request by public authorities, including to meet national security or law enforcement requirements or in response to legal process.
• If we determine it is necessary or desirable to comply with the law or to protect or defend our rights or property.
• As necessary to protect the rights, privacy, safety, or property of an identifiable person or group or to detect, prevent or otherwise address fraud, security or technical issues, or to protect against harm to the rights, property or safety of Illumina, our users, applicants, candidates, employees or the public or as otherwise required by law.
• Where the personal information is public.
• To seek advice from our lawyers and other professional advisers.
• To professional advisers (e.g. bankers, lawyers, accountants) and potential buyers and vendors in connection with the disposal or acquisition by use of a business or assets.
• Like most international businesses, we have centralized certain aspects of our business operations, including for example, financial, human resources, and information technology administration. This may result in the transfer of personal information from one country to another and amongst our various subsidiaries and affiliates. It should be noted that this may or may not include countries where the level of privacy protection and the legal rights of individuals are not considered commensurate with standards of protection in jurisdictions having comprehensive data protection laws, such as the countries of the European Union and Canada.

Access to Personal Information We Collect

You can ask to see the personal information that we hold about you. If you want to review, verify or correct your personal information, please submit a request via this web form.

When requesting access to your personal information, please note that we may request specific information from you to enable us to confirm your identity and right to access, as well as to search for and provide you with the personal information that we hold about you.

Your right to access the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide some or all of the personal information that we hold about you. In addition, the personal information may have been destroyed, erased or made anonymous. In the event that we cannot provide you with access to your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Correction of Collected Personal Information

We endeavor to ensure that personal information in our possession is accurate, current and complete. If an individual believes that the personal information about him or her is incorrect, incomplete or outdated, he or she may request the revision or correction of that information. We reserve the right not to change any personal information we consider is accurate.

If it is determined that personal information is inaccurate, incomplete or outdated, we will use reasonable efforts to revise it and, if necessary, use reasonable efforts to inform agents, service providers or other third parties, which were provided with inaccurate information, so records in their possession may be corrected or updated.

Retention of Collected Information

Except as otherwise permitted or required by applicable law or regulatory requirements, we will retain your personal information only for as long as we believe it is necessary to fulfill the purposes for which the personal information was collected (including, for the purpose of meeting any legal, accounting or other reporting requirements or obligations).

You may request that we delete the personal information about you that we hold. There are instances where applicable law or regulatory requirements allow or require us to refuse to delete this personal information. In the event that we cannot delete your personal information, we will inform you of the reasons why, subject to any legal or regulatory restrictions.

Requests to Access, Delete, Correct Information, or Withdrawal of Consent

Please submit requests to access, delete, or correct your personal information via this web form. Any request by you to us to delete your personal information may not result in deletion of any information submitted by you to a third-party provider (e.g., First Advantage, HireVue, stock management service). If you require the third-party to delete any of your personal information, you must contact the third party directly to request such deletion.

In certain circumstances you may have provided express consent in connection with your providing certain personal information to us of for a specific use of your personal information. In certain countries you may have a right to withdraw that consent. Please submit requests to withdraw your consent via this web form.

Resolving Concerns

If you have questions or concerns regarding the handling of your personal information please contact employeesvcs@illumina.com. Alternatively, you may report concerns or complaints, including information about potential data breaches involving personal information to the Legal Department at privacy@illumina.com.

You may also anonymously report violations of policy or law using Illumina’s third-party managed Compliance & Fraud Prevention Hotline. You can access the Hotline from www.illumina.com

Changes to Privacy Policy

This Privacy Policy is reviewed periodically to ensure it accurately captures all types of data collected or any additional or different processing of such data. We may, therefore, change this Privacy Policy at any time. The effective date of each version of this Privacy Policy is identified below.

Security of Collected Information

We are committed to protecting the security of the personal information collected, and we take reasonable physical, electronic, and administrative safeguards to help protect the information from unauthorized or inappropriate access or use.

Privacy Shield

With respect to the personal information of our employees, Illumina, Inc. complies with the EU-US and Swiss-US Privacy Shield Framework and adheres to the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. To learn more about the Privacy Shield program, and to view our certification page, visit https://www.privacyshield.gov/.

In compliance with the Privacy Shield Principles, Illumina is committed to resolving complaints or concerns you may have about privacy or how your personal information is used (refer to the Requests to Access or Correct Information and Resolving Concerns sections of this Privacy Policy).

If your complaint is not satisfactorily resolved with us directly, you may contact our independent dispute resolution provider, the International Centre for Dispute Resolution/American Arbitration Association for resolution (http://go.adr.org/privacyshield.html).

Illumina, Inc. is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC) with respect to the Privacy Shield. Under certain conditions you may invoke binding arbitration before the Privacy Shield Panel. Where applicable for employee matters, Illumina, Inc. commits to cooperation with the panel of the EU Data Protection Authorities (DPAs), the state or national data protection authority where the employee works or the Swiss Federal Data Protection and Information Commissioner (FDPIC), as applicable, to investigate unresolved complaints.

Notwithstanding any language to the contrary in this Privacy Policy, in cases of onward transfer to third parties of personal information of individuals received pursuant to the EU-US and Swiss-US Privacy Shield, Illumina, Inc. is potentially liable.