Generally, we collect, use, and disclose your PI in order to provide you services you request and as otherwise related to the operation of our business, which include both business purposes and commercial purposes described in ourPrivacy Policy and listed below (“Processing Purposes”). This may include disclosing or otherwise making PI available to our vendors that perform services for us (“Vendors”), including “Service Providers” and “Processors” defined under U.S. State Privacy Laws. Some of the Processing Purposes, as we discuss below, implicate “Sale,” “Sharing”, and or “Targeted Advertising.” For more details on the meaning of Sale, Sharing, and Targeted Advertising, and how to opt-out of them, please visit theDo Not Sell/Share/Target section in Section B below. Please note that the Processing Purposes as shown in the table are categorical descriptions, to aid in readability and clarity.

Processing Purposes–How We Use Your PI

Generally, we collect, use, disclose or otherwise process your personal information in connection with the operation of our business, including for the following Processing Purposes:

• Providing our products and services – to provide you with information, products and services, to perform activities that you have requested or information you agreed to receive
• Providing you with special offers or materials on behalf of the U.S. News Group or our Third-Party Business Partners (defined below) that may be of interest to you.
• Facilitating your relationship with the U.S. News Group and Third-Party Business Partners – to provide value-add and other services provided by the U.S. News Group and third-party partners, we may disclose your PI among the U.S. News Group and to certain third parties so that they can provide you with services you have requested or that you may be otherwise interested in (“Third-Party Business Partners”). Depending on the U.S. News Services you use, these Third-Party Business Partners may include without limitation retail merchants, automobile dealers, financial institutions, insurance companies and agencies, public and private educational institutions, travel agencies, cruise lines, tour operators, travel excursion organizations, real estate agents or brokers, financial advisors, and companies in the consumer service industries. In some cases, when you request a personalized product or service on the U.S. News Services, we may share your data with an aggregator who will in turn share it with third parties who are able to provide the product or service you requested.
• Customizing your experience, offers, and content – to enhance your experience on the U.S. News Services and the products and services we offer, we may deliver to you curated content, including marketing for U.S. News Group products or service offerings or that of our Third-Party Business Partners.
• Creating and updating profile information and inferences about you for the purposes outlined in this “Processing Purposes–How We Use Your PI” section.
• Registering and administering accounts – to process your registration with the U.S. News Services, verify your information is active and valid, and to manage your account.
• Recognizing you across devices, including by identifying when you log into or use the U.S. News Services on multiple devices or browsers, for the purposes of analytics, advertising, reporting and to improve the U.S. News Services
• Customer service and communications – to respond to questions, comments, or requests that you have for us or other customer service purposes; to contact you with regard to your use of the U.S. News Services and, at our discretion, changes to the U.S. News Services and/or their policies; and to verify eligibility for certain services offered by us or our Third-Party Business Partners.
• Research, development, and analytics – to better understand how users access and use the U.S. News Services, both on an aggregated and individualized basis, in order to improve the U.S. News Services and respond to user desires and preferences, and for other research and analytical purposes.
• Ad measurement, attribution, and other ad administration – to assist us in determining relevant advertising, the success of our advertising campaigns and where to place our ads, including ads placed on other websites. These activities may be carried out by us, our vendors, and/orThird-Party Digital Businesses (defined in the Do Not Sell/Share/Target section in Section B below).
• Market research and customer satisfaction – to administer surveys and questionnaires, such as for market research or customer satisfaction purposes.
• Targeting advertisements – to provide you or your device with customized advertisements on or off the U.S. News Services based on your interests.
• Safety, security, and compliance with legal obligations – for prevention, detection, investigation, and mitigation of illegal activities, fraud, injury to others or violation of our Terms and Conditions or our Privacy Policies.
• For purposes disclosed at the time you provide your personal information.
• For purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law.

The table below describes the categories of PI we collect as well as examples of types of data that fit within such categories, in the left column. The middle column lists Processing Purposes applicable to each category of PI. The right column states the categories of recipients that receive those specific categories of PI and Sensitive PI as part of disclosures for business purposes, as well as disclosures that may be considered a Sale or Sharing under certain U.S. State Privacy Laws.

We also may disclose each category of PI and Sensitive PI in the table to the following categories of recipients in a manner that does not constitute Sale or Sharing:

• To other parties at your direction or through your intentional action or to provide services you request

• To the government or private parties to comply with law or legal process

• In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, in which case we will transfer such information to the buyer or successor entity in any such corporate transaction

• In addition, our Vendors and the other recipients listed in the above table may, subject to contractual restrictions imposed by us and/or legal obligations, also use and disclose your PI for business purposes. For example, our Vendors and the other categories of recipients listed in the table below may engage subcontractors to enable them to perform services for us or process for our business purposes.

Certain of the U.S. State Privacy Laws require us to provide the following notice. More information about the purposes of processing which may implicate “Sale” can be found below, and recipients of PI where Sales are implicated are described in the table above.

NOTICE: We may Sell your Sensitive PI consistent with applicable law.

Processing Purposes Implicating Sale, Sharing, Targeted Advertising, and Profiling

When you provide us PI for the following Processing Purposes, we may use and disclose certain personal information that you provide for such purposes in a way that may constitute Selling and/or Sharing, as well as Processing of your PI for purposes of Targeted Advertising.

• Providing our products and services

• Targeting advertisements

• Ad measurement, attribution, and other ad administration

• Facilitating your relationship with our Third-Party Business Partners

• For purposes disclosed at the time you provide your personal information

Sources of PI

We collect PI directly from you or from your device, Third-Party Digital Businesses, Third-Party Business Partners, Vendors, our affiliates and related entities, other individuals (e.g., your friends, your family (such as your parents) and others that use the U.S. News Services and submit content concerning you or about you) and other third parties, and as described in ourPrivacy Policy.

Data Retention

Actual retention periods for all PI will depend upon how long we determine we have a reasonable need for the retention consistent with the collection purposes and applicable law. For instance, we may maintain business records for so long as relevant to our business, and may have a legal obligation to hold PI for so long as potentially relevant to actual or reasonably anticipated litigation or government investigation. We apply the same criteria for determining if we have a legal basis for retaining your PI that you ask us to delete. For more information on deletion requests see theRight to Delete section in Section B below.

As described in further detail below, subject to meeting the requirements for a Verifiable Consumer Request (defined below), we provide Consumers – which are, for clarity, residents of certain states – the privacy rights described in this section. For residents of states without Consumer privacy rights, we will consider requests but will apply our discretion in how we process such requests. For states that have passed consumer privacy laws but are not yet in effect as of the Effective Date, we will also consider applying state law rights prior to the effective date of such laws but will do so at our discretion.

Making a Request and Scope of Requests

As permitted by U.S. State Privacy Laws, any request you submit to us is subject to an identity verification process (“Verifiable Consumer Request”) as described in theVerifying Your Request section below. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the Consumer about whom we collected PI. Certain information may be exempt from such requests under applicable law, such as information we retain for legal compliance and to secure our services.

To make a request, other than a Do Not Sell/Share/Target request, please submit your request to us by one of the methods below. For instructions on how to submit a Do Not Sell/Share/Target request, please go to theDo Not Sell/Share/Target section below.

• Email us atprivacy@usnews.com
• Visit ourwebform

When you make a request, we will respond to the request with respect to information we have associated with your email address. We may have other PI about you that we are unable to associate that information with you.

Verifying Your Request

When you make a request, we will verify that you are the person you say you are, or, if you are seeking information on behalf of another person, that you are authorized to make the request on their behalf (see our “Authorizing an Agent” section immediately below). In addition, we will compare the information you have provided to us to ensure that we maintain personal information about you in our systems. As an initial matter, we ask that you provide us with, at a minimum, your name and email address. Depending on the nature of the request and whether we have the email address you have provided in our systems, we may request further information from you to verify that you are the Consumer making the request. We will review the information provided as part of your request and may ask you to provide additional information via e-mail or other means to complete the verification process. We will not fulfill your Right to Know (Categories), Right to Know (Specific Pieces), Right to Delete, or Right to Correction request unless you have provided sufficient information for us to reasonably verify you are the Consumer that is the subject of the request. The same verification process does not apply to opt-outs of Sale or Sharing, or limitation of Sensitive PI requests, but we may apply authentication measures if we suspect fraud (such as verifying access to the email provided when making the request).

If we cannot verify you in respect of certain requests, such as if you do not provide the requested information, we will still take certain actions as required by certain U.S. State Privacy Laws. For example, if you are a California Consumer:

• If we cannot verify your deletion request, we will refer you to this U.S. State Privacy Notice for a general description of our data practices.
• If we cannot verify your specific pieces request, we will treat it as a categories request.

Authorizing an Agent

You may designate an authorized agent to submit a request on your behalf by submitting a request in the manner described above. If you are an authorized agent who would like to make a request, the U.S. State Privacy Laws require that we ensure that a request made by an agent is a Verifiable Consumer Request and allow us to request further information to ensure that the Consumer has authorized the agent to make the request on their behalf. Generally, we will request that an agent provide proof that the Consumer gave the agent signed permission to submit the request, and, as permitted under the U.S. State Privacy Laws, we also may require the Consumer to either verify their own identity or directly confirm with us that they provided the agent permission to submit the request.

Your Consumer Privacy Rights

Appeal Rights
Residents of Colorado, Connecticut, Florida, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas and Virginia have the right to appeal a decision regarding a privacy request. You can exercise this right by responding to the email we send containing our response to your request, and following the instructions in such email.

Right to Limit Sensitive PI Processing
Certain personal information qualifies as sensitive data or Sensitive PI under the U.S. State Privacy Laws, which we refer to in this U.S. State Privacy Notice as “Sensitive PI”. Residents of certain states must give consent for the U.S. News Group to process their Sensitive PI. If you give such consent, you subsequently have the right to opt-out of certain processing of Sensitive PI if it is used or disclosed beyond certain internal business purposes. Where applicable, we will treat such an opt-out request as a revocation of any consent that you may have provided to your processing of Sensitive PI. In California, you have a right to request that we limit processing of Sensitive PI to those purposes permitted under the California Consumer Privacy Act.

Right to Know/Access

Right to Know – Categories/Confirmation of Processing

If you are a California resident, you have the right to request that we provide you with certain information about our collection, use and disclosure of your PI over the 12-month period prior to the request date, related to categories of PI. You can request that we confirm whether we are processing your personal information, and disclose to you: (1) the categories of PI we collected about you; (2) the categories of sources for the PI; (3) our business or commercial purpose for collecting or selling that PI; (4) a list of the categories of PI disclosed for a business purpose in the prior 12 months and, for each category of PI, the categories of recipients; and (5) a list of the categories of PI sold or shared about you in the prior 12 months and, for each, the categories of recipients.

Right to Know - Specific Pieces

You have the right to request a transportable copy of the specific pieces of PI we collected about you. Based on your state of residence, we may apply a limit on the number of “Right to Know” requests you make over a particular time period, as permitted under U.S. State Privacy Laws.

Right to Delete
You have the right to request that we delete any of your PI that we have collected directly from you, subject to certain exceptions which we will explain if they apply. We may need certain information in order to provide the U.S. News Services to you; if you ask us to delete it, you may no longer be able to use the Services.

Right to Correct
You have the right to request that we correct inaccuracies that you find in your personal information maintained by us. Your request to correct is subject to our verification (discussed above) and the response standards in the applicable U.S. State Privacy Laws.

Do Not Sell/Share/Target

Under the various U.S. State Privacy Laws, Consumers have the right to opt-out of certain processing activities. Residents of those states may opt out of the Sale of their PI or processing or Sharing of their PI for Targeted Advertising. We Sell or Share certain of your information to certain third parties, such as Third Party Business Partners, that may directly provide you with offers and promotions and opportunities that may be of interest to you. We also provide or allow third-party digital businesses, including social media platforms, analytics companies, data brokers, third-party advertisers, and other tech companies that offer digital advertising services (“Third-Party Digital Businesses”) to receive or collect from the U.S. News Services certain information, such as cookies and web beacons (e.g., pixel tags), IP address and/or browsing behavior (“cookie PI”) and information about your potential interests or characteristics, to deliver Targeted Advertising to you on the U.S. News Services or other services. We may also make available to Third Party Digital Businesses information otherwise collected from or about you, such as your email address (which we refer to below as“non-cookie PI”). This activity may also be considered a Sale under applicable law.

For information regarding other categories of third parties to which we may Sell/Share your PI, see the table above in thePI COLLECTION, USE, AND DISCLOSURES section above.

When you opt-out pursuant to the instructions below, it will have the effect of opting you out of Sale, Sharing, and Targeted Advertising, as applicable, under all of the various applicable state laws. Instructions for opting out are below.Please note that there are distinct instructions for opting out of cookie PI and non-cookie PI, which we explain further, below.

Opt-out for non-cookie PI: If you would like to submit a request to opt-out of our processing of your non-cookie PI (e.g., your email address) for Targeted Advertising, or opt-out of the Sale or Sharing of such data, make an opt-out request on ourwebform.

Opt-out for cookie PI: If you would like to submit a request to opt-out of our processing of your cookie-related PI for Targeted Advertising, or opt-out of the Sale/Sharing of such PI, you can exercise an opt-out request by visiting ourConsent Management Platform and following the instructions. You must exercise your preferences on each of our websites and apps you visit, from each browser you use, and on each device that you use. Since your browser opt-out is designated by a cookie, if you clear or block cookies, your preferences will no longer be effective and you will need to enable them again via our Consent Management Platform.

Your Additional Cookies Choices
In addition to the choices above, if you would like more information about Targeted Advertisements and to know your choices about certain kinds of online Targeted Advertising for participating entities, please visitNational Advertising Initiative Consumer Opt Out,Digital Advertising Alliance Your AdChoices, orAdChoices for your mobile device. The U.S. News Group does not provide any assurances that these third-party tools, programs or statements are complete or accurate.

Some of the U.S. State Privacy Laws also require us to state that we do not knowingly Sell or Share the PI of Consumers under 16.

Global Privacy Control or “GPC”
If you have enabled a legally recognized browser-based opt out preference signal (such as GPC) on your browser, we recognize such preference in accordance and to the extent required by applicable law. You will need to turn this on for each browser and device you use. We will apply such signals as a Do Not Sell/Share/Target requests as to cookie PI. Due to technical limitations, we are unable to apply such signals to non-cookie PI; however, you can make a Do Not Sell/Share/Target request as to non-cookie PI at ourwebform as just described above.

Automated Decision-Making and Profiling
We do not believe we carry out profiling in furtherance of decisions that produce legal or similarly significant effects. If we change our practices, we will change this policy and provide you with the right to opt-out of such activities as required by the applicable U.S. State Privacy Laws, subject to any applicable exceptions.

Right to Non-Discrimination; Incentive/Loyalty Programs
You have the right not to receive discriminatory treatment, in a manner prohibited by U.S. State Privacy Laws, for the exercise of your privacy rights.

We collect and use your PI to administer and maintain incentive/loyalty programs that may constitute a “financial incentive,” “price or service difference,” or “bona fide loyalty program” as defined under the U.S. State Privacy Laws. For a description of our current loyalty/incentive programs, including how to opt-in to or withdraw from such programs, and the basis for valuing your PI in connection with program benefits, clickhere. Please note that participating in our incentive programs is entirely optional, you will have to affirmatively opt-in to the programs to participate. Additionally, any opt-out instructions are available in the link above. We may add or change incentive programs by posting a notice on the program descriptions linked to above, so check them regularly.

Notwithstanding anything to the contrary, certain information may be exempt from such requests under applicable law such as information we retain for legal compliance or requests. In addition, we need not honor any of your requests to the extent that doing so would infringe upon our or any other person or party’s rights or conflict with applicable law.

In addition to CCPA rights, certain Californians are entitled to certain other notices, including those described below.

Third Party Marketing and Your California Privacy Rights

California's "Shine the Light" law permits California residents to request certain information regarding our disclosure of PI to third parties for their own direct marketing purposes. Separate from your CCPA rights described above, you have the following additional rights regarding disclosure of your information to third parties for their own direct marketing purposes. We may from time to time elect to share certain "personal information" (as defined by California's "Shine the Light" law) about you with third parties for those third parties’ direct marketing purposes. California Civil Code § 1798.83 permits California residents who have supplied personal information, as defined in the statute, to us to, under certain circumstances, request and obtain certain information regarding our disclosure, if any, of personal information to third parties for their direct marketing purposes. If this applies, you may obtain the categories of personal information shared and the names and physical addresses of all third parties that received personal information for their direct marketing purposes during the immediately prior calendar year (e.g., requests made in 2023 will receive information about 2022 sharing activities). To make such a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a California resident and provide a current California physical address. You may make this request by contacting us atprivacy@usnews.com. Any such request must include "Shine the Light California Privacy Rights Request" in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year.

As these rights and your CCPA rights are not the same and exist under different laws, you must exercise your rights under each law separately.

California Minors

Although the U.S. News Services are intended for an audience over the age of 18, any California residents under the age of eighteen (18) who have registered to use the U.S. News Services, and who posted content or information on the U.S. News Service, can request removal by contacting us atprivacy@usnews.com, detailing where the content or information is posted and attesting that you posted it. We will then make reasonably good faith efforts to remove the post from prospective public view or anonymize it, so the minor cannot be individually identified to the extent required by applicable law. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished or archived content by search engines and others that we do not control.

Users of the U.S. News Services, who are Nevada consumers, have the right to submit a verified request that the U.S. News Services not sell such Nevada consumer's covered information. Such right is further described, and the terms are defined, in Nevada Revised Statutes 603A (the "Nevada Internet Privacy Law"). The U.S. News Services do not currently sell any covered information as defined in the Nevada Internet Privacy Law. Nevada consumers may register an email address to which identity verification instructions will be delivered if the U.S. News Services begin selling covered information, as defined by the Nevada Internet Privacy Law, in the future. Any Nevada consumer who wishes to so register should send his/her email address and a request to register toprivacy@usnews.com with "Nevada Do Not Sell Request" in the subject line and the message of the email. Should a Nevada consumer's registered email address subsequently change, such Nevada consumer must contactprivacy@usnews.com to inform the U.S. News Services of such change (specifying the Nevada consumer's old and new email addresses), as the U.S. News Services will not search any other records in the event a registered email address is no longer valid.

This Section E of this U.S. State Privacy Notice is our Nevada Consumer Health Data Privacy Policy (“NCHD Privacy Policy”) and is effective March 31, 2024 (the“NCHD Privacy Policy Effective Date”). It explains our practices for“Consumer Health Data” as defined and regulated by Nevada’s consumer health data privacy law (SB 370) (the“Nevada Health Data Privacy Law”). Only this Section E applies to our processing of Consumer Health Data of Nevada“Consumers” (as defined in the Nevada Health Data Privacy Law).

Categories of Consumer Health Data Collected, Purpose of Collection and How We Use It

Generally, we collect and share Consumer Health Data of Nevada Consumers for the purpose of providing a product or service requested by such Nevada Consumers that use the U.S. News Services, for safety and security purposes, and for compliance and other legal purposes.

• Providing our products and services – to provide you with information, products and services, to perform activities that you have requested or information you agreed to receive.

• Customer service and communications – to respond to questions, comments, or other requests that you have for us or other customer service purposes.

• Safety, security, and compliance with legal obligations – for prevention, detection, investigation, and mitigation of illegal activities, fraud, injury to others or violation of our Terms and Conditions or our Privacy Policies, and to prepare for and defend legal claims.

• For purposes for which you provide your consent or authorization.

Depending on the nature of your activity on the U.S. News Services and your requests, we collect the following, which may be considered categories of Consumer Health Data:

• Data that identifies a consumer seeking health care services, such as if you use features on the U.S. News Services to look for doctors or hospitals, use the U.S. News Services to research over-the-counter medications or products, or consume content or articles that fall into this category.

We share Consumer Health Data in limited circumstances, as follows:

• Vendors that are classified as “processors” under the Nevada Health Data Privacy Law which process Consumer Health Data to assist us in providing products and services requested by consumers, and for the other purposes described in this NCHD Privacy Policy.

• Our other agents and contractors who assist us with the processing purposes described in this NCHD Privacy Policy, such as legal representatives who assist us with complaints involving Consumer Health Data.

• Assignees or potential assignees as part of an acquisition, merger, asset sale, or other transaction where another party assumes control over all or part of our business.

• Other parties with your consent.

We may share all of the categories of Consumer Health Data that we collect, which depends on the circumstances under which we collect it. We do not sell Consumer Health Data.

We may collect Consumer Health Data from the following sources: you, your device, your agents and representatives (for example, legal representatives in relation to a complaint), governmental entities (for example, if you have filed a lawsuit against us, we may obtain information from official filings or that we receive from government bodies), our affiliates, and franchisees, and other third parties that may have your Consumer Health Data in relation to the processing purposes described herein.

We will retain and use your Consumer Health Data for the length of time needed to carry out the purposes outlined in this NCHD Privacy Policy and in accordance with our record retention policies.

Consumer Rights Requests

Subject to applicable law, if you are a Nevada Consumer, you may have the following rights related to your Consumer Health Data:

• Right to confirm processing of Consumer Health Data and access such data

• Right to delete

• Right to withdraw consent (from processing which requires your consent)

• Right to appeal our refusal to act on a request within a reasonable time after you receive our decision. You may appeal our decision regarding your request by following the instructions in our response to your request.

You may request to exercise these rights by visiting ourwebform. Please note, as required under Nevada Health Data Privacy Law, we take commercially reasonable efforts to authenticate your request before we process your request. If we believe we need further information to authenticate your request, we may ask you to provide additional information to us.

Pursuant to the requirements of the Nevada Health Data Privacy Law, we will respond to your privacy requests free of charge, up to twice annually. If requests are manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request.

We reserve the right to amend this NCHD Privacy Policy at our discretion and at any time. When we make changes to this NCHD Privacy Policy, we will update the Effective Date in the first paragraph of this Section E (which will be the date that this NCHD Privacy Policy was last updated) or otherwise provide notice in compliance with applicable law.

This Section F of this U.S. State Privacy Notice is our Washington Consumer Health Data Privacy Policy (“WCHD Privacy Policy”) and is effectiveMarch 31, 2024 (the“WCHD Privacy Policy Effective Date”). It explains our practices for“Consumer Health Data” as defined and regulated by the Washington My Health My Data Act (RCW 19.373.005 et seq.) (the“MHMDA”). Only this Section F applies to our processing of Consumer Health Data of Washington“Consumers” (as defined in MHMDA).

Categories of Consumer Health Data Collected, Purpose of Collection and How We Use It

Generally, we collect and share Consumer Health Data of Washington Consumers for the purpose of providing a product or service requested by such Washington Consumers that use the U.S. News Services, for safety and security purposes, and for compliance and other legal purposes.

• Providing our products and services – to provide you with information, products and services, to perform activities that you have requested or information you agreed to receive.

• Customer service and communications – to respond to questions, comments, or other requests that you have for us or other customer service purposes.

• Safety, security, and compliance with legal obligations – for prevention, detection, investigation, and mitigation of illegal activities, fraud, injury to others or violation of our Terms and Conditions or our Privacy Policies, and to prepare for and defend legal claims.

• For purposes for which you provide your consent or authorization.

Depending on the nature of your activity on the U.S. News Services and your requests, we collect the following, which may be considered categories of Consumer Health Data:

• Data that identifies a consumer seeking health care services, such as if you use features on the U.S. News Services to look for doctors or hospitals, use the U.S. News Services to research over-the-counter medications or products, or consume content or articles that fall into this category

We share Consumer Health Data in limited circumstances, as follows:

• Vendors that are classified as “processors” under the MHMDA which process Consumer Health Data to assist us in providing products and services requested by consumers, and for the other purposes described in this WCHD Privacy Policy.

• Our other agents and contractors who assist us with the processing purposes described in this WCHD Privacy Policy, such as legal representatives who assist us with complaints involving Consumer Health Data.

• Assignees or potential assignees as part of an acquisition, merger, asset sale, or other transaction where another party assumes control over all or part of our business.

• Other parties with your consent.

We may share all of the categories of Consumer Health Data that we collect, which depends on the circumstances under which we collect it. We do not sell Consumer Health Data.

We may collect Consumer Health Data from the following sources: you, your device, your agents and representatives (for example, legal representatives in relation to a complaint), governmental entities (for example, if you have filed a lawsuit against us, we may obtain information from official filings or that we receive from government bodies), our affiliates, and franchisees, and other third parties that may have your Consumer Health Data in relation to the processing purposes described herein.

Consumer Rights Requests

Subject to applicable law, if you are a Washington Consumer, you may have the following rights related to your Consumer Health Data:

• Right to confirm processing of Consumer Health Data and access such data

• Right to delete

• Right to withdraw consent (from processing which requires your consent)

• Right to appeal our refusal to act on a request within a reasonable time after you receive our decision. You may appeal our decision regarding your request by following the instructions in our response to your request.

You may request to exercise these rights by visiting ourwebform. Please note, as required under MHMDA, we take commercially reasonable efforts to authenticate your request before we process your request. If we believe we need further information to authenticate your request, we may ask you to provide additional information to us.

Pursuant to the requirements of MHMDA, we will respond to your privacy requests free of charge, up to twice annually. If requests are manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request.

We reserve the right to amend this WCHD Privacy Policy at our discretion and at any time. When we make changes to this WCHD Privacy Policy, we will update the Effective Date in the first paragraph of this Section F (which will be the date that this WCHD Privacy Policy was last updated) or otherwise provide notice in compliance with applicable law.

If you have any questions about the Privacy Policy, the U.S. State Privacy Notice or practices described in it, you may contact us at:

Attention: Legal/Privacy
U.S. News & World Report, L.P.
129 W. 29th Street, 11th Floor
New York, NY 10001
privacy@usnews.com