California Employee Privacy Notice

Teamhealth

CALIFORNIA EMPLOYEE PRIVACY NOTICE

Effective Date: 07/01/2023

1. What is this document and why should you read it?

Team Health Holdings, Inc. and its subsidiaries, affiliates, and family of companies which does business under the brand name “Team Health” (collectively, “TeamHealth”, “we”, “us”, or “our”) hold and process a wide range of information, some of which relates to you as an individual who works on our team. This California Employee Privacy Notice (this “Notice”) describes how we collect and process personal information about our employees and contractors who are California residents (“you” or “your”). It also sets out details of how to contact us if you have any questions regarding the personal information collected about you.

In this context, personal informationgenerally means information from which you are identifiable or can be identified (e.g. your name, telephone number, Employee ID number), or other information about you that can be linked to you. In addition, processing means any activity relating to personal information, including, for example, collection, storage, use, consultation, disclosure, sharing and transmission.

In summary, we collect and process personal information about you in order to hire you, pay you, provide you with and administer benefits, pay taxes, and ensure your safety and well-being.

This Notice is not an employment contract. Employment with TeamHealth is on an “at-will” basis, meaning that either you or TeamHealth may terminate your employment at any time, with or without cause or notice.

This Notice is additional to and does not supplant or supersede our Privacy Policy.

Note that this Employee Privacy Notice does not apply to “protected health information” governed by the Health Insurance Portability and Accountability Act (“HIPAA”). To the extent we collect protected health information, we only process that information to the extent permitted by, and consistent with, applicable HIPAA requirements.

2. What types of personal information do we collect,where do we get it from, who do we disclose it to, and why do we collect it?

In the past 12 months, we have collected the following categories of personal information relating to California residents who are our current and former employees and contractors and their beneficiaries. These categories are defined by California law. We do not necessarily collect allinformation listed in a particular category, nor do we collect all categories of information for all individuals.

We have disclosed information in the following categories, including categories of sensitive personal information, to our subsidiaries and affiliates, service providers, and business partners within the past 12 months. We may also disclose this information to our legal, tax and accounting advisors, as well as with government entities as necessary and permitted by law. In the event we are acquired by or merge with another company, or otherwise undergo a change of control, we may also disclose the below categories of personal information as part of that transaction. We may also disclose your personal information to other third parties at your direction or with your consent.

We do not sell your personal information or share it with third parties in order to target advertising based on personal information obtained from your activity across businesses, distinctly‐branded websites, applications, or services, other than our websites and services with which you intentionally interact.

Category Source Purpose of Processing

Personal identifiers. Identifiers such as a real name, alias, postal address, Internet Protocol address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers.

This information is collected directly from youor our service providers.

We may also collect it from publicly available job or professional networking sites on which you post this information or from government agencies or other third parties (e.g., former employers or recruiters).

This information is necessary to administer your relationship with us, including meeting our legal obligations, and providing you with benefits and services, as applicable.

Information About You.Information that identifies, relates to, describes, or is capable of being associated with, a particular individual, including, but not limited to, your name, signature, social security number, address, telephone number, passport number, driver's license or state identification card number, education, employment, employment history, bank account number, or medical information.

This information is collected directly from you or our service providers.

We may also collect it from publicly available job or professional networking sites on which you post this information or from government agenciesor other third parties (e.g., former employers or recruiters).

This information is necessary to administer your relationship with us, including meeting our legal obligations, and providing you with benefits and services, as applicable.

Characteristics of classes protected under federal or California law. Familial status, disability, sex, national origin, religion, race, gender identity and gender expression, marital status, veteran status, medical condition, source of income, or age.

This information is collected directly from you or our service providers.

We may also collect it from publicly available job or professional networking sites on which you post this information or from government agencies or other third parties (e.g., former employers or recruiters).

This information is necessary to administer your relationship with us, including meeting our legal obligations, meeting our diversity and inclusion objectives, and providing you with benefits and services, as applicable.

Sensory Data.Audio, electronic, or visual information. For example, this may include recordings of calls to our call center or security camera footage at our facilities.

This information is collected directly from you or our service providers.

This information is processed in order to administer your relationship with us, including meeting our legal and compliance obligations and pursuing the efficient management of our business.

It is also processed in order to help detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and for compliance management.

Professional or employment-related information.Work history, academic and professional qualifications, educational records, references, interview notes, job title, position, hire dates, compensation, performance and disciplinary records, and vacation and sick leave records.

This information is collected directly from youor our service providers.

We may also collect it from publicly available job or professional networking sites on which you post this information or from government agencies or other third parties (e.g., former employers or recruiters).

This information is necessary to administer your relationship with us, and to pursue the efficient management of our business.

We also collect the below categories of sensitive personal information as defined under California law.

We do not use or disclose your sensitive personal information for purposes other than those necessary to carry out your employment contract, to aid in protecting and securing your personal information and our systems, to verify or maintain the quality or safety of our services and systems, or as otherwise permitted under regulations or required by law.

Category Source Purpose of Processing

Social security number, driver’s license number or other state ID number, and passport information.

This information is collected directly from you or our service providers.

We may also collect it from government agencies or other third parties (e.g., former employers or recruiters).

A social security number is necessary to administer your relationship with us, particularly as it relates to taxation.

Passport information is necessary for us to verify your right to work.

Account login, password, or credentials allowing access to an account.

This information is collected directly from you or our service providers.

This information is necessary to administer your relationship with us, including meeting our legal obligations, and providing you with benefits and services, as applicable.

It is also processed in order to help detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and for compliance management.

Racial or ethnic origin

This information is collected directly from you or our service providers.

This information is used to administer your relationship with us, including meeting our diversity and inclusion objectives, as well as to manage the workforce.

Health Information,including pandemic-related personal information, such as your temperature or your responses to questions intended to ascertain whether you may have been exposed to a virus (including but not limited to COVID-19).

This information is collected directly from you or our service providers.

This information is used to manage our workforce, including to ascertain whether you may have been exposed to a virus in connection with a pandemic.

Where do we keep personal information about you and for how long do we keep it?

We store personal information about you on computer systems operated by us or our service providers. We keep various records that contain personal information in accordance with applicable state and federal regulations, or pursuant to contractual obligations. In general, we aim to keep personal information only for as long as necessary and only for the reason(s) we collected it. It may be necessary to keep personal information longer than our official retention periods for legal or regulatory reasons, including litigation. To support us in managing how long we hold personal information and our record management, we maintain a data retention policy which includes clear guidelines on retention and deletion.

We consider the following criteria when determining how long a particular record will be retained, including any personal information contained in that record:

  • How long the record is needed to provide you with the products and services you request.
  • How long the record is needed to support and enhance our operational processes.
  • How long the record is needed to protect our rights and legal interests.
  • How long the record must be retained to comply with applicable laws and regulations.

The same personal information about you may be included in more than one record and used for more than one purpose, each of which may be subject to different retention periods based on the factors listed above.

4. Do We Collect the Personal Information of Minors?

We do not knowingly collect Personal Information directly from individuals under 16 years of age. We do not employee, recruit, or otherwise hire individuals under 16 years of age. We may collect Personal Information regarding individuals under 16 years of age from their parents or legal guardians, but only as necessary to provide employment and related benefits.

5. What are Your Rights Regarding Your Personal Information?

As a California resident, you may be entitled to all or some of the rights described below regarding your personal information, subject to certain conditions and limitations. Only those rights relevant to you will apply, and our inclusion of information about privacy laws does not imply that all privacy laws are applicable.

  • Right to Know – You may be entitled to request that we disclose to you personal information we have collected about you, the categories of sources from which we collected the information, the purposes of collecting the information, the categories of third parties to whom we have disclosed the information, the categories of personal information that we have disclosed to third parties for a business purpose, the categories of information sold, and the categories of third parties information is sold to. In some instances, you may have the right to receive the information about you in a portable and readily usable format. Before providing any of this information, we must be able to verify your identity. 
  • Right to Opt-Out – You have the right to opt-out of information sharing that constitutes “sharing” personal information under California law. 
  • Right to Deletion – Subject to certain conditions, you may be entitled to request that we delete personal information about you. Before deleting personal information, we must be able to verify your identity. We will not delete personal information about you when the information is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information by law.
  • Right to Correction– You may be entitled to request that we correct inaccurate personal information. Before collecting personal information, we must be able to verify your identity. We will not correct personal information about you when the information is required to fulfill a legal obligation, is necessary to exercise or defend legal claims, or where we are required or permitted to retain the information as-is by law.

Data solely retained for data backup purposes is principally excluded from these rights until it is restored to an active system or next accessed or used for a sale, disclosure, or commercial purpose.

If you choose to exercise any of these rights, to the extent that they apply, privacy law prohibits us from discriminating against you on the basis of choosing to exercise your privacy rights.

Please note that under applicable privacy law, we are only obligated to respond to personal information requests from the same consumer up to two times in a 12-month period. In addition, under applicable privacy law, and for the protection of your personal information, we may be limited in what personal information we can disclose.

California law also permits you to request in writing a list of the types of personal information that we have disclosed to a third party for their direct marketing purposes during the preceding year and to whom that information was disclosed.

6. How Can I Exercise My Rights and Submit a Personal Information Request?

You may exercise your privacy rights by visiting [insert link to webform] or by calling this toll-free number — [toll-free number].

Before providing information you request, deleting, or correcting information in accordance with these rights, we must be able to verify your identity. In order to verify your identity, you will need to submit information about yourself, including your name, contact information, and, to the extent applicable, providing your account login credentials. We will match this information against information we have previously collected about you or provided to you to verify your identity and your request. If we are unable to verify your identity as part of your request, we will not be able to satisfy your request. We are not obligated to collect additional information in order to enable you to verify your identity. For deletion requests, you will be required to submit a verifiable request for deletion and then confirm separately that you want personal information about you deleted.

If you would like to appoint an authorized agent to make a request on your behalf, you must provide the agent with written, signed permission to submit privacy right requests on your behalf. Alternatively, your authorized agent may provide evidence of having power of attorney or acting as a conservator for you. Note that we may require you to verify your identity with us directly before we provide any requested information to your authorized agent unless your authorized agent has power of attorney or acts as a conservator, in which case we will not contact you directly.

Information collected for purposes of verifying your request will only be used for verification.

7. Changes to this Privacy Notice

We may change this Notice at any time. This Notice, and any updates to this Notice, will be posted on [internal site]. You may visit [internal site] to view the most current version of this Notice. The date this Notice was last revised will appear at the top of the page as the effective date.

8. Contact Us

If you have any questions, concerns, complaints or suggestions regarding our Notice or the personal information collected about you, please contact us at [???? insert appropriate contact information.]

9. Privacy Policy

If you would like to learn more about our data collection practices, please visit our Privacy Policy. Privacy Policy.