Global Fair Processing Notice for Staff Data

Notice on how Barclays may use your information

Introduction

Barclays is committed to the protection of the information of its Staff. This Notice indicates how, when and why we may use your
information, how we will protect it, as well as your rights and responsibilities under applicable laws.

For the purposes of this Notice, “Staff” means any individual who has a work relationship with Barclays, such as permanent employees,
contractors, temporary workers, etc.
This Notice provides generic guidance and any data processing must comply with the local applicable laws and / or regulatory
environments regarding data protection/privacy, including collection of any sensitive data, monitoring of equality, diversity and CCTV,
and any marketing communications. In the event of conflicts with the policy, local legislation and / or regulatory environments will take
precedence. Additional information is available upon request on how we may process your data for compliance with local laws.

This Notice is intended as a statement of Barclays’ policy and does not form part of the employee’s contract of employment or otherwise
have contractual effect. It may be reviewed from time to time and may change or be withdrawn at Barclays’ discretion

1. Types of information we may collect about you

We collect information during recruitment, when you join Barclays and throughout your career with us. Some of this information may be
collected directly from you and some may be gathered from third parties, including companies providing a service to us.

Where appropriate to meet local legislation, specific consent of employees would be obtained prior to the collection of certain information.
We do not collect information where it would violate applicable local law – for example sensitive data1 is not collected in countries where
the collection of such information is prohibited. Depending on the country where you work, examples of information that may be collected
at some point may include:

Personal information

 Your name, personal and professional postal addresses, email addresses, telephone numbers
 Information about your dependents (for benefits and tax administration, where applicable)
 Contact details of your emergency contacts/next of kin
 Nationality/Citizenship
 Date of birth
 Gender
 Images/photos of you taken or obtained for business related purposes or during events organised or sponsored by Barclays2
 Biometric information (if applicable)
 Racial/ethnic origin, where permitted by applicable law.

Employment information

 Bank account(s) details for remittance payments, salary, discretionary awards and tax contributions
 Account details including numbers/ names and Securities transaction details for Personal Account dealing purposes
 Information contained in recruitment application and assessment forms (eg, CV, interview feedback, academic/professional qualifications, results of
psychometric tests etc.)
 Performance management (including statements of opinion derived from information about you)
 Recruitment processes - Screening and pre-employment checks (eg, credit history, employment references, work visas, etc.), where required and
permitted by applicable law
 Training attendance and assessment records, performance objectives
 Disciplinary and grievance details
 Where local law permits, details of breaches of any internal policies and applicable laws and regulations
 Information relating to use of Barclays’ IT systems and web site access where required and permitted by applicable law
 Anonymous statistical HR reports
 Credit reference information, where permitted by applicable law and where strictly relevant to the position or employee duties in question.

Health information

 Disability, sickness and absence details, to the extent permitted by applicable law in your country

2. How your information may be used

Barclays may collect and process information about you for the following purposes:

 Administration and management of your Staff record

 Internal recruitment
 Employee opinion surveys (in certain jurisdictions, this data is collected and processed anonymously)
 Business and process planning, monitoring and management reporting

1
Specifc types of information subject to special safeguards, which may include details of your health or any criminal convictions.
2
Consent of employee will be obtained.
  Performance, disciplinary and grievance management
 Payroll and benefits/bonus administration and, to the extent permitted by applicable law, the fixing of salaries, bonuses and benefits
 Health, safety, security (of Staff and Barclays property) and business continuity
 References: we may provide references about you to third parties now and in the future, which may include your reason for leaving Barclays
 Prevention and detection of internal fraud and other financial crime
 Monitoring for the purposes of equality and diversity to the extent permitted by applicable law
 Monitoring of compliance with IT related policies and applicable laws concerning the use of IT means and electronic communications and access
management to the extent permitted by applicable law
 CCTV images and/or recordings may be used for security purposes and supervision purposes, where permitted by local law*
 Images or photographs of you may be taken and used for legitimate business purposes (where applicable) including site access and security. Your
photographs/images may also be published and used in connection with your work in Barclays publication or on the bank’s intranet and/or
internet. Your agreement to use of your photographs/images will be obtained if required to comply with applicable laws regarding data
protection/privacy
 Talent/Career Management – the effective performance management of our Staff at all levels and Training
 Delivering benefits to you – in some cases we may share information with third party suppliers who provide services like our car scheme or
healthcare scheme
 We may process credit reference information relating to our Staff, where permitted by applicable law and where strictly relevant to the position or
employee duties in question.
 To protect our Staff, Customers and Barclays or where required for regulatory reasons, we may, during the course of your work relationship with us,
re-screen your details against lists including, but not limited to global sanctions information - where applicable law permits or requires such
screening
 Compliance with legal and regulatory obligations as required , from time to time, in various jurisdictions. This includes items such as regulatory
reporting and investigaions, employment law requriements, the processing of tax and national insurance/social security data and for financial
crime prevention related purposes e.g anti money laundering/sanctions/anti-bribery and corruption
 Tracking and recording of breaches of internal policies and applicable legal/regulatory requirements to the extent permitted by applicable law
 Processing where necessary to protect the vital interests of our Staff
 Marketing: subject to any additional steps to comply with applicable local law, including, where required, obtaining your consent, we may use the
information held on our systems to tell you, by electronic or other means, about Staff only offers, and Barclays products and services
 Where permitted by applicably law, data relating to racial or ethnic origin may be collected and processed, for diversity and equality purposes.

*Please refer to your local Information Risk Management (IRM) and Security policies for further information.

3. How long do we hold your information?

The Barclays Record Retention Schedules outline the length of time typical categories of information are kept. These are based on the
principle that information is kept only for as long as is necessary to comply with employment, contractual and regulatory
obligations. After that, information will be disposed of securely or blocked where local legislation requires.

4. How we protect the information about you?

The Barclays Group Information Risk Management Policy and Group Privacy Policy (along with local addendums or versions) set out the
standards we follow to keep your information secure. When information is kept by other companies providing a service to us, they are
bound to keep it secure and confidential.

5. Who will we share your information with?

The global nature of our business means your information may be shared with other Barclays companies, with regulatory and statutory
bodies (where local aplicable law permits) and anyone to whom we may transfer our rights and duties (eg, following the sale or
restructure of a part of the Barclays business) as well as any companies providing services to us or performing any of the above activities
on behalf of Barclays. We may share your information where required by law or regulation, to protect our interests, if we have a duty to
disclose it, or for legitimate business purposes in accordance with applicable local law. In all these cases, the recipients may be in your
country of employment or in another country where Barclays or its service providers operate, including outside of the European Union
(including countries which do not provide adequate level of protection of data as in your jurisdiction), to the extent permitted by
applicable law. Where we are sharing information with organisations in another country, we will ensure they agree to apply equivalent
levels of protection as we do. Unless this is not possible, for example because we are required by law to disclose information with
regulatory and statutory bodies. Where appropriate, we use data which is anonymous. Where this is not possible, we will take steps to
ensure the data is kept secure and only used for the agreed purpose.

6. Your responsibilities and rights

We want to make sure information about you is accurate but we also depend on you to inform us of changes to your personal details.
Where the information held about you is incomplete or inaccurate, you may request the rectification or deletion of such
information. Where required by applicable law, we will accommodate requests you may make for a copy or overview of the information
Barclays holds about you. If you wish to make a request for information held or have any questions on the above, please refer to the HR
Portal.

If you give us personal details about other individuals (such as next of kin or emergency contacts), you must ensure that you have
consents from any such individuals to give us this information for the purposes that we may have requested it.
Version Control

Version Date Author Change

V1 January 2013 Temi Awofala Approved by Managing Director,
HR Services and Transition
V2 February 2013 Temi Awofala Minor amendments and version
agreed for translations
V3 April – August Temi Awofala Annual Global review by
2014  HR DP
 DP Legal
 Privacy Managers
 EIP Global
 Local (in country) DP
V4 December 2015 Temi Awofala Annual Global review by
 HR DP
 DP Legal
 Privacy Managers
 EIP Global
Local (in country) DP