## 5. **International transfers**

Wiley is an international business. We may transfer, store or process personal information in any country where Wiley or its service providers operate. This includes the United States, the United Kingdom, Germany, Singapore, Brazil, India, Sri Lanka, Australia, the Philippines, and China. These countries might have privacy laws that do not provide the same level of protection as those of your country of residence. We take all necessary steps to ensure that personal information is treated securely and in accordance with all applicable data protection laws.

If we transfer personal information out of the European Economic Area we implement appropriate safeguards in accordance with applicable law, such as the European Commission’s Standard Contractual Clauses.

**EU-US Data Privacy Framework, UK Extension and Swiss-U.S. Data Privacy Framework**

John Wiley & Sons, Inc. and its subsidiaries Atypon Systems, LLC, Inscape Publishing, LLC., and Madgex Inc., comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. We have also certified to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.

To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/. Wiley is committed to processing all personal data received under the EU-U.S. DPF or under the Swiss-U.S. DPF in line with the requirements of those Frameworks. Where personal data received under either DPF is shared with third parties, we will comply with the Notice and Choice Principles as required by those Frameworks, and we retain responsibility in line with the Frameworks’ requirements for any such personal data processed by a third party acting as an agent on our behalf and we are responsible for the event giving rise to the damage.

This Privacy Statement describes the types of Personal Data we collect, the purposes for which we collect and use your Personal Data, and the purposes for which we disclose your Personal Data to certain types of third parties in the sections above. Pursuant to the DPF, EU, UK, and Swiss individuals have the right to obtain our confirmation of whether we maintain Personal Data relating to you in the U.S. Upon request, we will provide you with access to the Personal Data that we hold about you. You may also correct, amend, or delete the Personal Data we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the U.S. under DPF, should direct their query to privacy@wiley.com. See Section 9 Your Rights below for more information. In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, we commit to resolve DPF Principles-related complaints about our collection and use of your personal information. EU,UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and/or the Swiss-U.S. DPF should first contact us by emailing privacy@wiley.com. See Section 9 Your Rights below for more information.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Wiley commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/dpf-dispute-resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Annex 1 of the DPF Principles, located at https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction. The Federal Trade Commission has jurisdiction over Wiley’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), UK Extension to the EU-U.S. DPF, the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

You can find detailed information on the Data Privacy Framework Program at https://www.dataprivacyframework.gov/.