APAC T. Rowe Price Associate & Non-Associate Privacy Notice

APAC T. Rowe Price Associate & Non-Associate Privacy Notice

The T. Rowe Price entities listed at the end of this APAC T. Rowe Price Associate & Non-Associate Privacy Notice (Notice) have prepared this Notice to be provided to individuals like you who are either employed by (Associate) or, who are providing services (e.g., on a self-employed or contractor basis) (Non-Associate) to a T. Rowe Price entity. When we say “T. Rowe Price,” “we,” and “us” in this document, we mean the T. Rowe Price entity that you work for or with. In addition, you will see a number of references to the “T. Rowe Price family of companies,” which includes other T. Rowe Price entities globally, such as T. Rowe Price Associates, Inc., and T. Rowe Price Group, Inc., both in the United States and their affiliates and subsidiaries.¹

This Notice explains the types of personal data we collect, how we use it, who we share it with, how we protect it, and your legal rights. “Personal data” (also sometimes referred to as “personal information”) means information that (either in isolation or in combination with other available information) enables you to be identified as an individual directly or indirectly. In addition, we have set out where some of the requirements apply to specific countries only. Please read the following carefully as it explains our practices regarding your personal data and how it is handled.

Where you are employed as an Associate, T. Rowe Price needs to process your personal data in order to enter into our contract of employment with you and to continue to perform crucial aspects of that contract of employment, such as paying you and providing you with benefits (e.g., health care, pension). There are also statutory and other contractual requirements we have to comply with in relation to your employment. 

If we are not able to carry out the processing activities we describe in this Notice, we may not be able to comply with your contract of employment, or with the terms of the contract under which you provide services to us, and in certain very exceptional cases, we may not be able to continue your relationship with us. Of course, we hope it would never come to that; this is simply information we are obliged to provide to you as part of this Notice.

_{¹Certain of our affiliated companies, such as Oak Hill Advisors L.P., may have their own human resources privacy notice or policy that applies to you.}

Collection of Personal Data

We may collect personal data directly from you, or it may be supplied to us by another party. In most cases, we only allow other parties to carry out the collection of personal data about you when those other parties are acting as a service provider or contractor to us. The retention, use, and disclosure of your personal data by these companies is subject to our contracts and applicable laws. However, depending on your role, certain third parties may carry out collections of personal data under certain circumstances, such as the following:

• Certain third parties that have had or do have a direct relationship with you and handle or have handled your personal data in accordance with their own privacy notices and applicable laws. Examples include:
  • Employment services;
  • Employee benefit providers, such as health insurance, employee assistance, or financial services benefits providers;
  • Office-related services providers, such as food services, and in some jurisdictions, parking garages;
  • Personalized coaching/training services: and
  • Publications, trade association memberships or professional licensing organisations.

In some cases, we may receive personal data in connection with your use of such services, such as when we are paying or reimbursing you for your use of the service.

We may engage professional consulting services or research firms to collect data for us. For example, if you participate in a survey we sponsor, the other firm will provide you with its contact information and privacy notice before you are asked to provide any personal data to it.

We may also collect personal data from other publicly or commercially available sources. We may create personal data about you, such as records regarding leaves of absence. Creation of personal data about you may occur through traditional means or through artificial intelligence (AI), including generative AI. We may also collect information about you from work colleagues or clients, such as in connection with performance reviews or client satisfaction surveys. In each case, we only collect those data elements that are needed for our legitimate interests.

We may use cookies and other technologies to collect personal data regarding interactions with our digital content, such as our websites, mobile applications, or emails. To learn more about how we use cookies and how you can control your digital experiences (as applicable), please see our Cookie Policy.

When you work on our networks and computer systems, we may use logging and other technologies to collect personal data. We process all data we obtain from you, or other sources, including data from your previous employer, or that we create, in accordance with this Notice. 

Categories of Personal Data

The categories of personal data we may collect, process, maintain, use, and transfer, with your consent if and/or when required by applicable law, in connection with our current or former work relationships include that set out in the list below. While we have grouped information for Associates and Non-Associates together, not all examples will be relevant and will be dependent on your exact role, for example, the administration of benefits programs and pension plans is relevant for Associates, it is not relevant for Non-Associates.

• personal information, such as full name, previous names and nickname; honorifics and titles; gender; date of birth; place of birth; age; passport details; government-issued numbers and identification documents; photos; signature; and nationality;
• contact information, such as your home and work postal addresses, email addresses, contact numbers for telephone and mobile, and emergency contact details;
• education, work experience, and your views, such as information about your educational background and degree information, your work experience and other experience and skills included on your résumés/CVs, or otherwise collected as part of your employment or work with us (including any professional credentials and licences, certifications, and memberships and affiliations) and other data from résumés/CVs; biographical data relating to past roles, such as work history, business title, position type and level, and reason(s) for leaving a job; data from social media profiles, such as Facebook, LinkedIn, and similar platforms; information provided for company social and professional networks (employee profile data), including alumni programs, professional goals and interests, travel preferences, research/survey data, and other views you have shared with us;
• information about your role, such as your business title, position type and level, working time information, location, dates of employment, the start and end date of your employment contract or other contract under which you provide services to us, reemployment or reengagement eligibility, reporting information, work history, time and attendance records, leave and absence records, and reason for leaving; travel and expense records; training plan records; compliance records; and performance records and reviews;
• information about your salary and benefits and your financial information, such as your salary, bonus and commission entitlements, salary/payroll records (such as current and expected salary and benefits, bonus, and hourly rate); insurance benefits (including information about you and your dependents that we provide to the insurer); beneficiary and dependent information; benefit plan records for you and your beneficiaries and dependents (such as insurance, retirement plan, equity award, and other employee benefits such as pension plans (for Associates in Australia, superannuation account details)); benefits recipient numbers, tax withholding/payment codes, tax file numbers (for Associates in Australia); reference for invoicing; your bank account details and/or payment card information to facilitate compensation (such as for direct deposit and reimbursement of expenses) and payment dates; and company-issued payment card information (and personal payment card/account information if provided for reimbursement), including transaction records;
• information about your equity compensation to which you may be entitled, such as units of stock or options awarded, cancelled, or held;
• information about securities holdings, transactions, and positions for you and close family members, such as securities that you hold or can exercise control over, securities transactions and information about a second job or officer or director position outside the T. Rowe Price family of companies, and similar types of information for close family members;
• information required for work and immigration visa/permit applications, such as your and your dependents’ full names, contact details, education, and work experience;
• audio and visual information such as photographs, video images, audio recordings (such as call monitoring records, recorded conference calls), CCTV records, and voicemails;
• information regarding buildings and property and your location, such as CCTV images (which may include video and voice recordings of you) filmed in and around our APAC offices, swipe card access, and the location and configuration of your workstation/office when you are on premises, and location or region you are in when you are using a company-issued device or when you use another device to interact with our digital systems or content or for telephone calls;
• information regarding IT and communications systems and equipment, Internet of things, sensor information, such as your system identifiers (e.g., usernames or online credentials); internet protocol (IP) address; MAC address; SSIDs and other device or persistent identifiers; device characteristics (such as browser information); web server and application logs; browsing data, first- and third-party cookies; web beacons; clear GIFs; pixel tags; records from access control devices, such as badge readers; records from technology monitoring programs, including suspicious activity alerts; records of equipment that is used by you; monitoring of web traffic and emails; information collected from logging and data loss prevention tools regarding activities conducted on systems, networks, and devices we make available to you; data collected by “always on” devices (personal assistants); workplace sensors (such as to gage occupancy); and other consumer-activated devices;
• performance and disciplinary information, such as performance reviews, evaluations and ratings, information about disciplinary allegations, the disciplinary process and any disciplinary warnings, details of grievances and any outcome, and for Non-Associates, service provision reviews and the handling of any complaints in relation to the services you provide;
• absence information, such as dates of leave of absence/vacation, maternity/paternity/shared parental leave, confirmation of a birth of a child, training/educational leave, family care leave, and medical leave;
• background check information, such as information obtained through reference checks, confirmation about your work/educational background, work visa details, previous addresses, current and past directorships held by you and members of your immediate family, credit history, international credential verification, public safety verification, and adverse media searches;
• information about work activities and communications, such as notes and documents regarding corporate matters in which you are or may be involved, emails and other communications you send or receive through a device or network maintained by or for us, and recordings of telephone calls and video meetings (as applicable);
• information about regulatory actions against you, such as if you are subject to a regulatory action;
• information about gifts and entertainment, such as gifts you give or receive from others connected with the T. Rowe Price family of companies or business entertainment where you are a host or a guest;
• information relating to compliance matters, such as data subject requests and supporting documentation; records of reporting as required under the Code of Ethics and Personal Transactions Policy and Global Code of Conduct (collectively, “Codes”); complaints, investigations, incident details, and resolutions of such matters; employment eligibility verification records; background screening records; and other records maintained to demonstrate compliance with applicable laws, such as payroll tax laws, occupational safety records and workers’ compensation program records; records of privacy and security incidents involving HR records, including any security breach notifications; information obtained through reference checks and/or gathered under company policies; financial regulator, broker-dealer, and bank affiliations for you and close family members; records relating to complaints, investigations, incident details, and resolutions of such matters; and records maintained in connection with legal matters, litigation, or subject to legal holds.

In addition to the collection, processing, and use of the types of personal data described above, T. Rowe Price may collect, process, maintain, use, and transfer the following special categories of personal data about you:

• health and medical data, such as medical information for job placement and fitness to work examinations, accommodation of disabilities, medical information for leave and absence management (e.g., the number of sick days, the information contained in a doctor's certificate/medical certificate and information on disability leave), and workers’ compensation programs, wellness program data, information pertaining to enrollment and utilisation of health and disability insurance programs, information collected in connection with occupational safety programs such as information about accidents and illness incurred at work, information on any disabilities, if you choose to voluntarily provide it to us, and any related workplace accommodations and information on maternity leave for purposes of accommodating the workplace and compliance with legal obligations;
  
• religious affiliations, where this has been provided voluntarily to T. Rowe Price for purposes of equal opportunities and diversity monitoring and initiatives or if disclosed by you voluntarily for our business planning for time-off requests;
• children’s information, while we do not collect any personal data directly from children, we collect children’s information pertaining to children from the parents or guardians of the children, such as child’s name, date of birth, identification numbers, and relationship to you as a beneficiary, and as part of benefit program eligibility and enrollment records;
• criminal records data, in the event that T. Rowe Price has conducted or received the results of criminal records background checks in relation to you, where relevant and appropriate to your role or where you provide the information to us in line with the annual reporting requirements that you are or may be subject to under our Codes;
• trade union membership or affiliation, such as for the purposes of administering trade union subscriptions through payroll;
• race or ethnicity data, such as information contained in your passport or other citizenship and right to work documentation, and information that you have voluntarily provided to T. Rowe Price for the purposes of our equal opportunities and diversity monitoring and initiatives;
• sexual orientation data, such as marital status and information contained in your marriage/civil partnership certificate for the purpose of administering name changes, and information that you have voluntarily provided to T. Rowe Price for the purposes of our equal opportunities and diversity monitoring and initiatives; and
• other types of personal data that may be defined as sensitive personal data according to applicable local law.

How We Use Personal Data

Legitimate interests refers to collecting and using data in a manner that is reasonably required for, or related to, our functions or activities, whether as a business or as an employer. When relying on the legitimate interests basis for processing your personal data, we will balance the legitimate interest(s) pursued by us and any relevant third party with your interest(s) and fundamental rights and freedoms in relation to the protection of your personal data to ensure that it is appropriate for us to rely on legitimate interests and to identify any additional steps we need to take to achieve the right balance.

For Associates and Non-Associates based in jurisdictions where the applicable data protection laws do not use the concept of “legitimate interests” as a basis for processing personal data: Where legitimate interests is listed as the reason for processing in the table above, we instead rely on another legal basis for processing your personal data. Such other legal basis could include, for example, where processing your personal data is reasonable for the purposes of managing or terminating your employment relationship or provisions of services to us or if processing your personal data is necessary for a purpose that is clearly in your interest and we cannot obtain your consent in a timely way or you would not reasonably be expected to withhold consent. In some jurisdictions (such as Australia), a legal basis of processing is not required; however, you should still review the table above as it describes how we will use your personal data. 

We may use AI, including machine learning, as part of our business operations for one or more of the purposes set out above, which involves the processing of your personal data. For example, we may use tools powered by AI to assist us with identifying and considering suitable candidates for our vacancies or to assist with our information security programmes. When we communicate with you, this may also be powered by or incorporate AI.

Your personal data may also be processed as part of the training, testing, and use of AI to support one or more of the purposes set out above. Where we use AI, we do so in accordance with applicable law and our policies and procedures.

To Whom Do We Disclose Personal Data

Your personal data is intended for T. Rowe Price and may be disclosed within the T. Rowe Price family of companies and, in certain circumstances, to other parties as directed by you.

We may disclose your personal data to:

• T. Rowe Price's family of companies. As the T. Rowe Price entity that you work for, or provide services to, is part of a wider group of companies with headquarters in the U.S. and offices located across the globe, which all partially share management, IT, human resources, legal, compliance, finance and audit responsibility, we may disclose your personal data among the T. Rowe Price family of companies, including our subsidiaries and affiliates, for employment/business reasons and to conduct the other activities described in this Notice. Due to the global nature of T. Rowe Price, the T. Rowe Price family of companies participate in a centralised management of the group, and thus the transfer of personal data within, and among, the T. Rowe Price family of companies is necessary to support the functions in different business contexts. Our family of companies includes subsidiaries and affiliates whose names include “T. Rowe Price,” “Oak Hill Advisors,” and “OHA.”

We may also disclose your personal data to the following types of other organisations:

• External auditors, accountants, background check service providers, legal, and other professional advisors.
• Our service providers. We use other companies or contractors (service providers) to perform services on our behalf or to assist us with the operation of T. Rowe Price business. For example, when you use our online portal to apply for employment or perform a self-evaluation, the HR information database is currently operated by a service provider. While we may use a service provider to assist in relation to any of the purposes for which we may collect personal data, they generally fit within one or more of the following categories of service providers:
  • Infrastructure and technology service providers;
  • Analysis, research, event, and communications providers; and/or
  • Providers of administrative services for T. Rowe Price, such as payroll or payment providers, relocation and visa application providers, talent and educational services, benefit providers, and travel services.
  In the course of providing such services, these service providers may have access to your personal data. However, we will only provide our service providers with the information that is necessary for them to perform the services. They will act under our instructions, and we instruct them not to use your personal data for any other purpose. We will always use our best efforts to ensure that all the service providers we work with will keep your personal data secure.
• Other parties permitted by law. In certain circumstances, we may be required to disclose your personal data in order to comply with a legal or regulatory obligation (for example, we may be required to disclose personal data to the police, regulators, government agencies, or to judicial or administrative authorities). We may also disclose your personal data to other parties where disclosure is both legally permissible and necessary to protect or defend our rights, in matters of national security, for law enforcement purposes, to enforce our agreements, or to protect your rights or those of the public.
• Other parties in connection with ordinary business activities. We may disclose your personal data, such as your business contact details, photo, and biographical information, to other parties with which we or another member within the T. Rowe Price family of companies interact in the ordinary course of business, such as when you are included on an email with others.
• Other parties connected with business transfers. We may transfer your personal data to other parties (including existing or newly formed companies in the T. Rowe Price family of companies) in connection with a reorganisation, restructuring, merger, acquisition, or transfer of assets, provided that the receiving party agrees to treat your personal data in a manner consistent with this Notice.

Where We Store Your Personal Data

Due to the nature of our global business and the technologies used, the personal data that we collect from you may be transferred to, stored at, and accessed from a destination outside the jurisdiction in which you are located, whose data protection laws may not be as extensive as those in your jurisdiction.

Your personal data may be transferred to, stored at, and accessed from T. Rowe Price Associates, Inc., in the United States and by staff who work for us or another affiliate at offices in the United Kingdom, European Economic Area, Middle East, North America, and Asia Pacific (APAC). It may also be processed by staff of our service providers who typically are located in similar regions. Regardless of location, we will put in place appropriate protections and controls to ensure that recipient entities provide an adequate level of data protection that is at least comparable to the protection set out under applicable law to protect the integrity and security of your personal data before transferring your personal data by way of execution of appropriate data transfer agreements or confirming there are in place adequate security measures and other controls.

If permitted under the applicable data protection law in your jurisdiction, you can ask for a copy of our appropriate safeguards by contacting us as set out below under "Contact us."

Your Choices/Your Privacy Rights

Depending on the location of the office with which you are employed or provide services to, you may have various rights in connection with our processing of your personal data, each of which is explained below, although the specifics and condition vary depending on the applicable law. If you wish to exercise one or more of the below rights, please contact us as stated below under “Contact us,” and include your name, email, and postal address, as well as your specific request and any other information you think would be useful in order for us to process your request.

• Access. You may have the right to confirm with us whether your personal data is processed and, if it is, to request access to that personal data including the categories of personal data processed, the purpose of the processing and the recipients or categories of recipients. We do have to take into account the interests of others; however, and other applicable exceptions which may apply, so this is not an absolute right, and if you want to request more than one copy we may charge a fee.
  For Associates employed by our Australia entity: You may request access to personal information contained in your personnel files or other storage deposits that are also an employee record of the kind prescribed by the Fair Work Regulations 2009 (Cth). This includes records of basic employment details, such as your name and the nature of your employment, pay, overtime hours, averaging arrangements, leave entitlements, and superannuation contributions.
• Rectification/Correction. You may have the right to rectify or correct inaccurate or incomplete personal data concerning you. In addition, where you have used an online portal to load your personal data, and where there is functionality that allows you to do so, you may access, review, and update your personal data directly.
• Deletion. You may have the right to ask us to erase personal data concerning you, except that we are not obligated to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
• Restriction. In limited circumstances, you may have the right to request that we restrict processing of your personal data. This may apply where you believe such data to be inaccurate, that our processing is unlawful, or that we no longer need to process such data for a particular purpose; however, this right is not absolute. Where we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it, we would mark stored personal data with the aim of limiting particular processing for particular purposes in accordance with your request or otherwise restrict its processing.
• Portability. You may have the right to receive personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format and you may have the right to transmit that data to another entity.
• Objection. Under certain circumstances you may have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data, including profiling (profiling is not a standard practice, so when applicable), by us, and we can be required to no longer process your personal data. This may include requesting human intervention in relation to an automated decision (when applicable) so that you can express your view and to contest the decision. This right is not absolute and may not apply in certain circumstances.
• Make a Complaint. You also have the right to lodge a complaint. Please contact us as stated below under “Contact us.”

If we need additional information to verify your identity, we will let you know. We will endeavour to respond to a verified request no later than a month after receipt, unless there are grounds for extending our response time frame by up to two further months. In the event of an extension, we will explain to you why the extension is necessary. In some cases, your ability to exercise a right will be limited, as required or permitted by applicable law. If we cannot fulfill your request because we cannot verify your identity or due to exceptions under applicable law, we’ll let you know in our response.

For How Long Do We Keep Your Personal Data

We will only retain your personal data for as long as it is necessary for the purpose for which the data was collected and to the extent permitted by applicable laws. For example, we may retain certain details and correspondence until the time limit for claims arising from the interaction has expired or to comply with regulatory requirements regarding the retention of that data. When we no longer need to use your information, we will remove it from our systems and records and/or take steps to promptly anonymise it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject).

Security

We have implemented technical and organisational security measures in an effort to safeguard personal data in our custody and control. Such measures we have implemented include limiting access to personal data only to Associates, Non-Associates, and authorised service providers who need to know such information for the purposes described in this Notice; training for our Associates and Non-Associates; as well as other technical, administrative, and physical safeguards. While we endeavour to always protect our systems, sites, operations, and information against unauthorised access, use, modification, and disclosure, due to the inherent nature of the internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others, such as hackers.

Language 

This Notice is written in English and may be translated into other languages. In the event of any inconsistency between the English version and the translated version, the English version shall prevail.

T. Rowe Price Entities

Contact Us

If you have questions regarding this Notice or if you would like to exercise your rights as a data subject, please use one of the following methods (as available to you) to submit an enquiry:

• Use myHR through the internal T. Rowe Price Exchange;
• Send an email to APAC_Human_Resources@troweprice.com; or
• Through the post to: APAC HR, T. Rowe Price, 6/F, Chater House, 8 Connaught Road, Central Hong Kong.

Date and Changes to This Privacy Notice  

This Notice is the most recent version, and the date it was last updated is located below. We reserve the right to change our Notice from time to time. If we decide to make a material change to our Notice, we will endeavour to make you aware of that fact by, for example, notifying you of these changes via email and/or posting an alert on an internal website. If we make a change that we are required by law to inform you of in other ways (such as by email), we will do so.

Last Updated: 5 June 2026