## GDPR Statement

At Check Point, we are committed to upholding the highest standards of data protection and privacy in compliance with the European Union General Data Protection Regulation (GDPR), which came into effect on May 25, 2018, and its UK implementation. Our commitment to security, privacy, and compliance forms the cornerstone of our operations and services, ensuring that both we and our customers meet the requirements set forth by the GDPR requirements.

**Data Protection by Design.** Check Point incorporates strong data protection principles and measures when designing our products and services. This proactive approach not only ensures the security of data processing but also embeds privacy into the lifecycle of all of our activities.

**Rights of the Data Subject.** We acknowledge and support the rights of data subjects as stipulated by the GDPR, including the right to access, correct, delete, and restrict the processing of personal data. Check Point provides mechanisms to facilitate these rights efficiently and transparently via an online form available on our website.

**Data Security and Confidentiality.** In line with Article 32 of the GDPR, Check Point continually assesses and updates its security practices to protect against unauthorized access, alteration, and/or disclosure of personal data. For more details, visit our **Information Security Measures Policy**.

**Training and Awareness.** We conduct annual training sessions and maintain ongoing awareness programs for our employees to ensure they understand the GDPR regulations and are competent in implementing its requirements effectively.

**Partnership and Accountability.** Check Point assists its customers in fulfilling their GDPR obligations by providing comprehensive security solutions and expert guidance. We continuously monitor compliance to uphold our accountability and commitment to GDPR. Check Point's Trust Point is dedicated to maintaining the trust of our customers by ensuring that our compliance with GDPR and other data protection regulations remains stringent and transparent.

**Disaster Recovery.** We maintain comprehensive plans and procedures for disaster recovery and business continuity.

**Data Transfers.** In order to regulate the transfer of personal data between the Check Point entities, Check Point has adopted an intercompany agreement for transfers of data between all the Check Point entities, including the EU Standard Contractual Clauses and UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

**Data Processing Agreement (DPA).** Our DPA is incorporated into our End Users License Agreement and is meant to regulate any personal data processing conducted by Check Point with respect to our customers and partners.

This statement is meant to affirm Check Point's commitment to GDPR compliance and outlines the measures the company takes to ensure it meets its obligations under the said regulations.

## Last updated: May 21, 2024