s

In this notice, Bio-Rad Laboratories, Inc. ("Bio-Rad", "we") addresses specific disclosure requirements under Cal. Civ. Code § 1798.100 et seq. ("California Consumer Privacy Act") vis-a vis California residents ("consumers" or "you").

I. Personal Information Collection and Purposes of Use

A. In this CCPA Notice at Collection Online, we are addressing disclosure requirements under California Civil Code §1798.100(b) and California Attorney General Regulations § 999.305 at or before the point of online collection.

1. We collect the following categories of personal information about consumers:

a. Product Inquiries and Support: If you request information or support in connection with our products or services, we collect personal information (such as name, work e-mail, company, address, title, phone number, country and industry) in order to respond to your request and provide the information or support to you.

b. Social Media, Advertising and Marketing: We may collect personal information (such as contact information, company, job title, location, date, time, and your interests and preferences) from you when you interact with us on social media, online advertising, or by completing a form. We collect this information in order to understand your interests, personalize content and provide to you the information you have requested.

c. Online Activity: We collect personal information that your computer or other device or browser sends to us in connection with your access to our website (such as internet protocol (IP) address, browser type, referring/exit pages, operating system, date and time stamp and session data). We also collect personal information about your use of our website (such as the pages you are visiting, authentication information, and your preferences). We use this information in order to administer our website and ensure its functionality, to understand how you use our website, to gather usage and demographic information about our user base as a whole, to analyze trends, to enhance, improve, and optimize our website and your user experience, and to provide content and advertising based on your browsing activities and interests.

d. Legal Matters: We collect personal information (such as name, work e-mail, company, address, title, phone number, country) in order to comply with our legal obligations, resolve disputes and enforce our agreements.

e. Security and Fraud Protection: We collect personal information (such as name, addresses, IP addresses) to protect you, other users, us or third parties from harm, including fraud, data security breaches or where someone's physical safety seems at risk.

f. Reorganization, Sale or Purchase: Personal information collected from you (such as name of employees and titles and customer names) may be disclosed or otherwise processed as necessary in connection with a reorganization or sale of our company or assets or an acquisition.

g. Vendor On-Boarding: We collect personal information from you (such as name, work e-mail, company, address, phone number, job title; social security number, bank account information, credit card number, passport number; veteran, disable, minority ownership status) in order to support the procurement processes.

h. Finance Matters: We collect personal information from you (such as name, work e-mail, company, address, phone number; bank account information, credit card number) for billing, collections and accounts payable purposes and as necessary to facilitate our business transactions with you.

i. Employment: We collect personal information from you (such as name, address, e-mail address, phone number, Social Security number, passport number, performance evaluations) to create and maintain employee records, including for payroll and benefit purposes, and to meet legal obligations.

j. Job Applications: We collect personal information from you (such as name, address, e-mail address, phone number, current title, current or past job history, transcripts, Social Security number, passport number) when you apply for a job to contact you with respect to potential employment, evaluate your qualifications, and for the on-boarding process in the event of a job offer.

II. Privacy Policy — Our Personal Information Handling Practices in 2019

A. We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household, or device ("personal information"). Personal information does not include:

• Publicly available information from government records.

• Deidentified or aggregated consumer information.

• Information excluded from the CCPA’s scope, like:

  • health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data;

  • personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FCRA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver’s Privacy Protection Act of 1994.

B. In the preceding 12 months, we have collected the following categories of personal information from California residents:

1. We have collected such personal information from the following categories of sources:

• Directly from consumer. For example, from documents that our customers provide to us related to the services for which they engage us.

• Indirectly from consumer. For example, through information we collect from our customers in the course of providing services to them.

• Directly and indirectly from activity on our services or on our website (bio-rad.com and bio-rad-antibodies.com). For example, from submissions through our website portal or website usage details collected automatically.

• From third-parties that interact with us in connection with the services we perform.

2. We collected such personal information for the following business or commercial purposes:

• To fulfill or meet the reason you provided the information. For example, if you share your name and contact information to request a price quote or ask a question about our products or services, we will use that personal information to respond to your inquiry. If you provide your personal information to purchase a product or service, we will use that information to process your payment and facilitate delivery. We may also save your information to facilitate new product orders or process returns.

• To provide, support, personalize, and develop our Website, products, and services.

• To create, maintain, customize, and secure your account with us.

• To process your requests, purchases, transactions, and payments and prevent transactional fraud.

• To provide you with support and to respond to your inquiries, including to investigate and address your concerns and monitor and improve our responses.

• To carry out our obligations and enforce our rights arising from any contracts entered into between us and you, including billing and collection.

• As necessary or appropriate to protect the rights, property or safety of us, our consumers or others.

• To help maintain the safety, security, and integrity of our Website, products and services, databases and other technology assets, and business.

• To provide you with email alerts, event registrations and other notices concerning our products or services, or events or news, that may be of interest to you.

• To personalize your Website experience and to deliver content and product and service offerings relevant to your interests, including targeted offers and ads through our Website, third-party sites, and via email or text message (with your consent, where required by law).

• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

• As described to you when collecting your personal information or as otherwise set forth in the CCPA.

• To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us about our consumers is among the assets transferred.

3. We shared such personal information with the following categories of third parties:

• Service providers.

• Bio-Rad subsidiaries.

4. In the preceding 12 months, we disclosed the following categories of personal information about California residents for a business purpose:

Category A: Identifiers.
Category B: California Customer Records personal information categories.
Category C: Protected classification characteristics under California or federal law.
Category D: Commercial information.
Category F: Internet or other similar network activity.
Category G: Geolocation data.
Category H: Sensory data.
Category I: Professional or employment-related information.
Category J: Non-public education information.
Category K: Inferences drawn from other personal information.

5. In the preceding 12 months, we sold the following categories of personal information about California residents: We did not sell any personal information of California residents in the preceding 12 months and we will not sell any personal information of California residents. This includes personal information of minors under 16 years of age.

C. In line with the California Consumer Privacy Act, until and including December 31, 2020, the above disclosures pertaining to the preceding 12 months contained in this notice do not extend to:

1. personal information that is collected by Bio-Rad about a natural person in the course of the natural person acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or contractor of Bio-Rad to the extent that the natural person’s personal information is collected and used by Bio-Rad solely within the context of the natural person's role or former role as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or a contractor of Bio-Rad; personal information that is collected by Bio-Rad that is emergency contact information of the natural person acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or contractor of Bio-Rad to the extent that the personal information is collected and used solely within the context of having an emergency contact on file; or personal information that is necessary for Bio-Rad to retain to administer benefits for another natural person relating to the natural person acting as a job applicant to, an employee of, owner of, director of, officer of, medical staff member of, or contractor of Bio-Rad to the extent that the personal information is collected and used solely within the context of administering those benefits ("HR Exemption"), and

2. personal information reflecting a written or verbal communication or a transaction between Bio-Rad and a natural person, where the natural person is acting as an employee, owner, director, officer, or contractor of a company, partnership, sole proprietorship, nonprofit, or government agency and whose communications or transaction with Bio-Rad occur solely within the context of Bio-Rad conducting due diligence regarding, or providing or receiving a product or service to or from such company, partnership, sole proprietorship, nonprofit or government agency ("Business-to-Business Exemption").

This applies with the exception of the disclosures regarding the selling of personal information about California residents. California consumers have particular rights under the California Consumer Privacy Act as further described in this privacy policy. The California Consumer Privacy Act provides that, until and including December 31, 2020, certain of the described rights do not extend to the HR Exemption or Business-to-Business Exemption.

III. California Residents' Privacy Rights

a. California residents have the right to request disclosure of (i) the categories and specific pieces of the personal information about them that we have collected and use, (ii) the categories of sources from which the personal information has been collected, (iii) the categories of personal information about them that we sold or disclosed for a business purpose and the categories of third parties to whom the personal information was sold or disclosed for a business purpose (if applicable), as well as (iv) the business or commercial purposes for collecting or, where applicable, selling their personal information. California residents also have the right to request (v) deletion of their personal information pursuant to Cal. Civ. Code §§1798.105 and (vi) may not be discriminated against because they exercise any of the privacy rights conferred by the California Consumer Privacy Act.

b. California residents can make requests as follows: by accessing the webform at www.Bio-RadIntegrityHelpline.com (choose "Ask a Question"), calling 800-461-9330, or sending an email to: dataprivacy@bio-rad.com. When receiving a request, we will verify that the individual making the request is the California resident to whom the personal information subject to the request pertains. This is accomplished by a review of the request and the requester by the Bio-Rad Data Privacy Office. In order for their requests to be verifiable, California residents must provide the following information together with their requests: requester’s full name, email address, and a mailing address. In general, we avoid requesting additional information. However, if we cannot verify the requester from the information we already maintain, we may request additional information.

c. California consumers may exercise their rights themselves or may use an authorized agent to make requests on their behalf. When using an authorized agent to submit a request to disclose certain information about the processing of personal information or to delete personal information, we may require that a California resident (i) provide the authorized agent written permission to do so and make a certified copy of such written permission available to us at Bio-Rad Laboratories, Inc., Attn: Bio-Rad Data Privacy Office, 1000 Alfred Nobel Drive, Hercules, CA 94547, and that the California resident verify his or her own identity directly with us. This applies unless the authorized agent has been provided with power of attorney pursuant to Probate Code sections 4000 to 4465. We may deny a request from an agent who does not submit proof that they have been authorized by the California resident on whose behalf they are making the request.

d. For questions or concerns about our privacy policy and practices, please contact dataprivacy@bio-rad.com or Bio-Rad Laboratories, Inc., Attn: Bio-Rad Data Privacy Office, 1000 Alfred Nobel Drive, Hercules, CA 94547.

Date of this Privacy Policy: January 1, 2020.