Code of Business Conduct - Leighton Asia

Code of Business Conduct2.3. Personal Information and PrivacyLAIO regards the fair and lawful treatment of personal information as being ofutmost importance.Our commitmentDocuments, or information (including data), created or stored on computers or otherelectronic media belonging to LAIO, including personal information, are the propertyof LAIO.“Personal information” means documents and information relating to an individualwho can be identified by that documentation or information alone, or in combinationwith other documents and information which is in the possession of LAIOWith respect to personal information, LAIO will:• Only collect such documents and information as necessary for businesspurposes, in a fair and lawful manner• Protect such documents and information and, unless otherwise agreed by anindividual, not disclose it for any purpose other than the purpose for which it wascollected, or as required by lawYour responsibilityYou must always respect the privacy of other people and comply with applicableprivacy laws.In this respect, you must only:• Collect and use personal information that is necessary for business purposes• Collect personal information by lawful, fair and unobtrusive means• Collect sensitive information with the individual’s consent, where necessary• Disclose information to third parties with consent or where required by law to dosoGiven the complexities of local laws in relation to privacy, if you have any doubtabout the handling of personal information, consult a human resources person, orlegal counsel, within your business or contact the Business Conduct Representativein your business.LAIO Employees should be aware that private information collected by members ofLAIO may have to be released to third parties under law.ReferencesLeighton GGS - Privacy GuidelineLAIO Standards and Procedures will be developed and made available in the LAIOManagement System.Leighton Asia, India and Offshore Revision 430 November 2014 Page 19 of 46