NETGEAR Candidate Privacy Notice

Global Notice with Jurisdiction Supplements | Last updated: October 14, 2026

Contents

• Part A: Global Candidate Privacy Notice (Sections 1 to 13)
• Part B: Jurisdiction Supplements
  • Supplement 1: California (CCPA Notice at Collection and Privacy Policy)
  • Supplement 2: Other United States Jurisdictions
  • Supplement 3: European Economic Area
  • Supplement 4: United Kingdom
  • Supplement 5: Canada
  • Supplement 6: Singapore
  • Supplement 7: Australia
  • Supplement 8: Japan
  • Supplement 9: Republic of Korea
  • Supplement 10: Taiwan
  • Supplement 11: India
  • Supplement 12: United Arab Emirates

Part A: Global Candidate Privacy Notice

1. About This Notice

This Candidate Privacy Notice ("Notice") explains how NETGEAR, Inc. and its affiliated companies ("NETGEAR," "we," "us," or "our") collect, use, share, and protect personal information about people who apply for jobs with us, who are recruited or referred to us, or who join our talent community ("Candidates" or "you").

This Notice has two parts. Part A applies to all Candidates worldwide. Part B contains supplements that add to or modify Part A for Candidates in specific jurisdictions. If there is a conflict between Part A and a supplement that applies to you, the supplement governs. If any provision of this Notice conflicts with applicable law, we will comply with the law.

This Notice covers the recruitment process only. If you are hired, a separate employee privacy notice will apply to you. Our general NETGEAR Privacy Policy (www.netgear.com/about/privacy-policy/) applies to your use of our websites, products, and services and does not apply to Candidate personal information except as stated in this Notice.

2. Who Is Responsible for Your Personal Information

The NETGEAR company that is recruiting for the role you apply for (the "Hiring Entity") is responsible for your personal information. NETGEAR, Inc., located at 3553 North First Street, San Jose, California 95134, USA, operates our global recruiting systems and is also responsible for the personal information it processes for those purposes. A list of Hiring Entities and their contact details appears in the supplements in Part B. In some jurisdictions, the Hiring Entity and NETGEAR, Inc. may be called a "controller," "business," or "personal information handling business."

3. Personal Information We Collect

We collect the categories of personal information below, depending on the role, the stage of the process, and local law. We collect only what is reasonably necessary for recruitment, and we do not ask for information that local law prohibits us from requesting.

Sensitive information. Some of the information above is considered "sensitive" or "special category" information in certain jurisdictions, such as government identification numbers, immigration status, criminal records, health or disability information, and race or ethnicity. We collect sensitive information only where necessary for a legitimate recruitment purpose and permitted by law, and with your consent where the law requires it. Providing diversity information is always voluntary, and declining will not affect your application.

Information about others. If you give us information about other people, such as references or emergency contacts, please make sure they know you are sharing it and have agreed where required.

What happens if you do not provide information. You do not have to provide personal information to us. However, if you do not provide information we need to assess your application or to meet legal requirements (for example, to verify your right to work), we may not be able to consider you for a role.

4. How We Use Your Personal Information

We use Candidate personal information for the following purposes:

• Managing recruitment: to receive and process your application, communicate with you, schedule interviews, and keep records of the recruitment process.
• Assessing your suitability: to evaluate your skills, qualifications, and experience against the requirements of the role, and to compare Candidates.
• Making and managing offers: to prepare offers, conduct pre-employment checks, and begin onboarding if you accept an offer.
• Verifying information: to verify your identity, qualifications, references, and right to work, and to conduct background checks where permitted by law.
• Conflicts of interest: to identify actual or potential conflicts of interest.
• Travel and accommodations: to arrange or reimburse interview travel and to provide reasonable accommodations.
• Equal opportunity: to monitor and promote equal opportunity and diversity, using aggregated or voluntarily provided information where permitted by law.
• Talent community: with your consent where required, to consider you for future roles and send you information about job opportunities.
• Security and fraud prevention: to protect our systems and people, and to detect and prevent fraudulent applications, impersonation, and other misconduct.
• Improving recruitment: to analyze and improve our recruiting processes, tools, and fairness, generally using aggregated or de-identified information.
• Legal and compliance: to comply with legal and regulatory obligations, respond to lawful requests from authorities, conduct audits and investigations, seek professional advice, and establish, exercise, or defend legal claims.

We will not use your personal information for purposes that are materially different from those above without giving you notice and, where required, obtaining your consent.

5. Use of Artificial Intelligence and Automated Tools

We use some technology tools, including tools that use artificial intelligence ("AI"), to help our recruiters manage a high volume of applications. Currently, these tools:

• AI-assisted application review: our applicant tracking system, provided by Ashby, reviews the resume and application answers you provide and compares your skills, employment history, education, and answers against the qualifications and characteristics required for the role. It produces criteria matches, which we use to prioritize our review. The tool does not consider protected characteristics such as race, sex, age, or disability.
• Fraud detection: an AI tool reviews applications to detect fraudulent submissions, such as fake applications submitted by a bot, so that our recruiters spend less time reviewing fraudulent applications.
• Interview recording and note-taking: for some interviews, we may use AI tools to record audio or video and to transcribe and summarize the interview. Recruiters use the recordings, transcripts, and summaries to review your responses and assess your qualifications against our hiring criteria. We will tell you before the interview, explain the recording process, and explain how to opt out of the recording. Opting out will not affect your candidacy.

These tools help us identify potentially qualified Candidates, but they do not make hiring decisions. AI-generated assessments are one of several factors we consider, and our recruiters evaluate your skills and qualifications to determine your suitability for the role. A person reviews every application before it is rejected. Where the AI tool finds that an application does not match any of the criteria we set for the role, a recruiter reviews the application to confirm that determination before any decision is made. We do not make decisions to hire or reject a Candidate based solely on automated processing. Our Applicant AI Notice provides more details about these tools.

You may opt out of AI-assisted application review by sending your request by email to TAops@netgear.com. Our recruiting team will then review your application and other relevant materials manually, and opting out will not negatively affect your consideration. To request a reasonable accommodation or another selection process, contact TAOps@netgear.com. Questions about these tools may also be sent to TAOps@netgear.com.

6. How We Share Your Personal Information

We share Candidate personal information only as needed for the purposes in Section 4, with:

• NETGEAR affiliates: hiring managers, interviewers, recruiters, and HR, legal, and IT personnel in NETGEAR companies worldwide who need the information for recruitment.
• Service providers: companies that process information on our behalf under contract, including our applicant tracking system provider (Ashby), background check providers (such as Checkr), assessment and interview tools, messaging services, travel providers, immigration counsel, and IT and hosting providers.
• Recruiters and staffing agencies that referred you or that assist with a search.
• Professional advisers such as lawyers, auditors, and insurers.
• Government authorities and others where required by law, to respond to lawful requests, or to protect the rights, safety, and property of NETGEAR, our personnel, or others.
• Parties to a corporate transaction, such as a merger, acquisition, or sale of assets, subject to confidentiality obligations.

We require our service providers to protect your information and to use it only to provide services to us. We do not sell Candidate personal information, and we do not share it for cross-context behavioral (targeted) advertising.

7. International Transfers

NETGEAR is a global company. Our recruiting systems are operated by NETGEAR, Inc. and hosted in the United States, and personnel of NETGEAR affiliates in other countries may access your information where they are involved in recruitment. As a result, your personal information may be transferred to, stored in, and accessed from countries other than the one where you live, including the United States, which may not have the same data protection laws as your country.

Where required, we protect transfers with appropriate safeguards, such as our intra-group data transfer agreement and standard contractual clauses approved by the relevant authorities, and with contractual commitments from our service providers. For more information or a copy of the relevant safeguards, contact us as described in Section 13. The supplements in Part B give jurisdiction-specific details.

8. How Long We Keep Your Information

We keep Candidate personal information only as long as necessary for the purposes in this Notice, including to comply with legal, accounting, and reporting requirements and to establish or defend legal claims. Retention periods depend on the jurisdiction, as described in the supplements. In general:

• If you are hired, relevant information becomes part of your employee record and is governed by the applicable employee privacy notice.
• If you are not hired, we keep your information for the period stated in the supplement for your jurisdiction, after which we delete or anonymize it.
• If you join our talent community, we keep your information for the period you agreed to, and you may ask us to remove you at any time.

9. How We Protect Your Information

We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, use, disclosure, alteration, and loss. These include access controls limited to people with a need to know, encryption, and contractual requirements for service providers. No system is completely secure, so please use care when sending information to us.

10. Your Rights and Choices

Depending on where you live, you may have rights to:

• request access to, or a copy of, your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of your information;
• object to or restrict certain processing, or withdraw consent where we rely on consent;
• request a portable copy of your information;
• request information about, or human review of, decisions made using automated tools; and
• lodge a complaint with a data protection authority.

The supplements in Part B describe the rights that apply in each jurisdiction. To exercise your rights, contact us as described in Section 13. We will need to verify your identity before responding, and we may ask for additional information for that purpose. You may use an authorized agent where permitted by law. We will not discriminate or retaliate against you for exercising your rights.

11. Talent Community and Communications

With your consent where required by law, we may keep your information in our talent community to consider you for future roles and send you job alerts. You can withdraw consent or unsubscribe at any time through the link in our messages or by contacting us. If you opt in to receive recruitment updates by text message or WhatsApp, our NETGEAR Text Messaging Terms apply, and you can opt out by replying STOP.

12. Changes to This Notice

We may update this Notice from time to time. The "Last updated" date at the top shows when it was last revised. If we make material changes, we will provide notice as required by law.

13. How to Contact Us

For questions about this Notice or to exercise your rights, contact us at:

• Privacy requests: privacypolicy@netgear.com or our online request form at https://preferences.netgear.com/privacy
• Recruitment questions: TAOps@netgear.com
• Data Protection Officer (for the EEA and UK): dpo.netgear@fieldfisher-tech.com
• Mail: NETGEAR, Inc., Attn: Legal Department (Privacy), 3553 North First Street, San Jose, California 95134, USA

To request this Notice in another format or language, contact us using the details above.

Part B: Jurisdiction Supplements

Each supplement below applies to Candidates who apply for roles in, or who reside in, the jurisdiction named, and adds to or modifies Part A.

Supplement 1: California

This supplement applies to Candidates who are California residents and is our notice at collection and privacy policy for Candidates under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its regulations (together, the "CCPA"). The business responsible for your information is NETGEAR, Inc., 3553 North First Street, San Jose, California 95134.

A. Categories, Purposes, Recipients, and Retention

In the past 12 months we have collected, and we will collect, the categories of personal information below from the sources described in Section 3 of Part A. We disclose each category for business purposes to the categories of recipients listed. We do not sell any category, and we do not share any category for cross-context behavioral advertising.

How we set retention periods. We keep Candidate records for the duration of the recruitment process and for four years after the hiring decision for the role, as required by California employment law (including the record retention requirements of the California Civil Rights Council for applications and automated-decision system data), unless a longer period is required to resolve a claim or comply with law. If you are hired, your information becomes part of your employee record.

B. Sensitive Personal Information

We use and disclose sensitive personal information only for purposes permitted by Cal. Code Regs. tit. 11, § 7027(m), such as verifying your eligibility to work, performing background checks where permitted, providing accommodations, and complying with law. We do not use sensitive personal information to infer characteristics about you. Because of this, the right to limit the use of sensitive personal information does not apply.

C. Your California Privacy Rights

Subject to certain exceptions, you have the right to:

• Know and access: request that we disclose the categories of personal information we have collected about you, the categories of sources, the business purposes, the categories of third parties to which we disclosed it, and the specific pieces of personal information we hold about you;
• Delete: request that we delete personal information we collected from you;
• Correct: request that we correct inaccurate personal information;
• Opt out of sale or sharing: we do not sell or share Candidate personal information, so there is nothing to opt out of;
• Automated decisionmaking technology (ADMT): Where we use ADMT to make a significant decision about you, request information about how the ADMT was used and, unless an exception applies, opt out of its use (see section D below); and
• Non-retaliation: not to be discriminated or retaliated against for exercising your rights.

How to submit a request. Submit requests by email to privacypolicy@netgear.com or through our online form at https://preferences.netgear.com/privacy. We will confirm receipt within 10 business days and respond within 45 calendar days. If we need more time (up to another 45 days), we will tell you why in writing.

Verification. To protect your information, we will verify your identity by matching information you provide (such as your name, email address, and the role you applied for) with information in our records. We may ask for more information if needed.

Authorized agents. You may designate an authorized agent to submit a request for you. We will require written, signed permission from you and may ask you to verify your identity directly with us, unless the agent holds a valid power of attorney.

Opt-out preference signals. Because we do not sell or share Candidate personal information, we have no Candidate opt-out to apply to a Global Privacy Control or similar signal.

D. Automated Decisionmaking Technology

As described in Section 5 of Part A and our Applicant AI Notice, we use AI-assisted application review, which compares your skills, employment history, education, and application answers against the qualifications for the role and produces criteria matches that we use to prioritize review. A recruiter reviews every application before it is rejected, including confirming the AI determination for any application that does not match the criteria, and has authority to advance any Candidate. Because a person makes these decisions, we do not use automated decisionmaking technology to make significant decisions about Candidates. Even so, you may opt out of AI-assisted application review by sending an email to TAops@netgear.com, in which case our recruiting team will review your application manually, and you may request information about our use of AI tools concerning you by emailing us at TAops@netgear.com. We will not retaliate against you for making either request.

E. Contact and Updates

For questions about this supplement, see Section 13 of Part A. This supplement was last updated on the date shown at the top of this Notice.

Supplement 2: Other United States Jurisdictions

This supplement applies to Candidates for roles in the United States outside California. Most state consumer privacy laws do not apply to information collected in a job application context, but the laws below may apply.

A. Automated Employment Decision Tools and AI

B. Biometric Information

We do not collect biometric identifiers or biometric information (such as fingerprints, face geometry, or voiceprints) from Candidates. Interview recordings, where used, are not used to identify you. If this changes, we will provide notice and obtain your written consent before collection as required by laws such as the Illinois Biometric Information Privacy Act, Texas Business and Commerce Code § 503.001, and Washington RCW 19.375.

C. Background Checks

Background checks are conducted only after a conditional offer where required by law, with separate disclosures and your written authorization under the Fair Credit Reporting Act and applicable state and local laws, including fair chance hiring laws. Those disclosures describe your rights, including your right to a copy of the report.

D. Your Rights

Although most state privacy laws do not give Candidates statutory rights, you may contact us as described in Section 13 of Part A to request access to, correction of, or deletion of your information, and we will consider your request in line with applicable law.

E. Retention

If you are not hired, we keep your data as set forth in section A of Supplement 1 after the recruitment process for the role ends, to respond to questions and legal claims, after which we delete or anonymize it. Longer periods apply only where required by law or to defend a claim.

Supplement 3: European Economic Area

This supplement applies to Candidates for roles in the European Economic Area ("EEA") and to other Candidates whose data is subject to the EU General Data Protection Regulation ("GDPR").

A. Controller and Data Protection Officer

The controller of your personal data is the Hiring Entity for the role you apply for, together with NETGEAR International Ltd, which manages recruitment in the EEA, and NETGEAR, Inc., which operates our global recruiting systems. They act as joint controllers.

Our Data Protection Officer can be contacted at dpo.netgear@fieldfisher-tech.com.

B. Purposes and Legal Bases

Where we rely on legitimate interests, we have balanced those interests against your rights. You may request information about this balancing by contacting us.

Criminal records. We process information about criminal convictions only where authorized by EU or Member State law, only where relevant to the role, and generally only at the offer stage.

Information from other sources. Where we obtain your data from recruiters, referrers, references, background check providers, or publicly available professional profiles, we do so for the purposes above and will provide this Notice within one month, or at our first contact with you.

C. Automated Decision-Making

A person reviews every application before it is rejected, including confirming the AI determination for any application that does not match the criteria for the role. As a result, we do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. The AI tools described in Section 5 of Part A support, but do not replace, decisions made by our recruiters and hiring managers.

D. International Transfers

Your data will be transferred to NETGEAR, Inc. in the United States and may be accessed by NETGEAR affiliates and service providers in other countries. Where a country has not been found by the European Commission to provide adequate protection, we rely on the European Commission's standard contractual clauses, included in our intra-group data transfer agreement and our contracts with service providers. You can request a copy of the relevant safeguards by contacting our Data Protection Officer.

E. Retention

If you are not hired, we keep your data for one year after the recruitment process for the role ends, to respond to questions and legal claims, after which we delete or anonymize it. If you consent to join our talent community, we keep your data for up to two years from your consent so we can consider you for other roles. Longer periods apply only where required by law or to defend a claim.

F. Your Rights

Under the GDPR, you have the rights described below. To exercise them, contact us as described in Section 13 of Part A or our Data Protection Officer. We respond within one month, which may be extended by up to two further months where necessary.

• Access: obtain confirmation of whether we process your personal data and a copy of it;
• Rectification: have inaccurate data corrected and incomplete data completed;
• Erasure: have your data deleted in certain circumstances;
• Restriction: have the processing of your data restricted in certain circumstances;
• Objection: object to processing based on legitimate interests, on grounds relating to your particular situation;
• Portability: receive data you provided to us in a structured, commonly used, machine-readable format, where processing is based on consent or on steps toward a contract and is automated; and
• Withdraw consent: where we rely on consent, withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with a supervisory authority, in particular in the EEA country where you live, work, or where an alleged infringement took place. Our lead supervisory authority is the Data Protection Commission of Ireland (www.dataprotection.ie).

Supplement 4: United Kingdom

This supplement applies to Candidates for roles in the United Kingdom. Supplement 3 (European Economic Area) applies to UK Candidates, with references to the GDPR read as the UK GDPR and the Data Protection Act 2018, as amended by the Data (Use and Access) Act 2025, and with the following changes.

• Controller: NETGEAR UK Ltd, Cain Road, Bracknell, Berkshire UK RG12 1HL, UK, together with NETGEAR International Ltd and NETGEAR, Inc.
• Special category and criminal data: we process this data under the conditions in Schedule 1 of the Data Protection Act 2018, including for employment obligations and equality of opportunity monitoring, in accordance with our appropriate policy document.
• Automated decisions: A person reviews every application before it is rejected, including confirming the AI determination for any application that does not match the criteria for the role. We therefore do not make significant decisions about you based solely on automated processing. If we do so in the future, we will tell you, and you will be able to make representations, obtain human intervention, and contest the decision.
• International transfers: we protect transfers outside the UK with the International Data Transfer Addendum to the EU standard contractual clauses or the UK International Data Transfer Agreement, or other safeguards recognized under UK law.
• Retention: as described in Supplement 3, Part E.
• Complaints: you may complain to us first using the contact details in Section 13 of Part A. We will acknowledge your complaint within 30 days and respond without undue delay. You also have the right to complain to the Information Commissioner's Office (www.ico.org.uk).

Supplement 5: Canada

This supplement applies to Candidates for roles in Canada. The Hiring Entity is NETGEAR Canada Ltd, 10760 Shellbridge Way, Suite 168, Richmond BC V6X 3H1, Canada.

A. All Canadian Candidates

• We collect, use, and disclose your personal information only for the recruitment purposes described in section A of Supplement 1, which we consider reasonable and necessary to assess your application and establish an employment relationship. Where consent is required, we rely on your consent, which you give by submitting your application, and you may withdraw it subject to legal and contractual restrictions, with the consequence that we may not be able to continue considering your application.
• Your personal information will be stored and processed in the United States and may be accessed from other countries by NETGEAR affiliates and service providers, including our applicant tracking system provider. While outside Canada, it is subject to the laws of those countries and may be accessible to their courts, law enforcement, and national security authorities.
• If you are not hired, we keep your data as set forth in section A of Supplement 1 after the recruitment process for the role ends, to respond to questions and legal claims, after which we delete or anonymize it. Longer periods apply only where required by law or to defend a claim.
• You may request access to and correction of your personal information by contacting our Privacy Officer at privacypolicy@netgear.com or at preferences.netgear.com.

B. Alberta and British Columbia

Under the Personal Information Protection Acts of Alberta and British Columbia, we collect, use, and disclose personal information about potential employees as reasonably required to establish an employment relationship, after notifying you of the purposes in this Notice. Our service providers outside Canada, including in the United States, may collect, use, store, or disclose your personal information for us. Questions about how they handle your information can be directed to Privacy Officer, privacypolicy@netgear.com. You may complain to the Office of the Information and Privacy Commissioner of Alberta (www.oipc.ab.ca) or of British Columbia (www.oipc.bc.ca).

Supplement 6: Singapore

This supplement applies to Candidates for roles in Singapore under the Personal Data Protection Act 2012 ("PDPA"). The Hiring Entity is the Singapore branch of NETGEAR International Inc., 25 North Bridge Road, #02-01, Singapore 179104, Singapore.

• Purposes and consent: we collect, use, and disclose your personal data for the purposes in Part A. We may collect, use, and disclose personal data without consent where permitted by the PDPA, including for the evaluative purpose of determining your suitability for employment (for example, when we obtain references). Otherwise, by submitting your application you consent to our collection, use, and disclosure of your personal data for these purposes.
• Withdrawal of consent: you may withdraw consent on reasonable notice by contacting our Data Protection Officer. We will tell you the likely consequences, which may include that we can no longer consider your application.
• NRIC and other identification numbers: we will not collect your NRIC, FIN, or passport number, or a copy of your identification document, during the application stage. We collect them only at the offer or onboarding stage where required by law or to verify your identity to a high degree of fidelity.
• Access and correction: you may request access to your personal data and information about how it has been used or disclosed in the past year, and request correction of errors. We will respond as soon as reasonably possible, and if we cannot respond within 30 days, we will tell you when we will be able to respond. We may charge a reasonable fee for access requests.
• Transfers outside Singapore: your personal data will be transferred to the United States and may be accessed by NETGEAR affiliates and service providers in other countries. We ensure that recipients provide a standard of protection comparable to the PDPA through our intra-group data transfer agreement and contracts with service providers.
• Retention: we keep your data for two years after the recruitment process for the role ends, unless you join our talent community or a longer period is required by law.
• Data Protection Officer: Kirsten Daru, Chief Legal, Security, and Privacy Officer; legal@netgear.com; 3553 N. First Street, San Jose, California, 95134 USA.

Supplement 7: Australia

This supplement applies to Candidates for roles in Australia under the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs"). The Hiring Entity is NETGEAR Australia Pty Ltd, Tower one - International Towers Sydney Level 46, 100 Barangaroo Avenue, Barangaroo NSW 2000, Australia. Part A and this supplement together are our collection notice and privacy policy for Candidates.

• Collection from others: we may collect personal information about you from recruiters, referees, background check providers, and publicly available professional profiles, as described in Section 3 of Part A. We will tell you, or make you aware, when we do so.
• Required by law: some information, such as evidence of your right to work in Australia, is required to comply with Australian law, including the Migration Act 1958 (Cth).
• Consequences of not providing information: if you do not provide the information we request, we may not be able to consider your application.
• Sensitive information: we collect sensitive information (such as health information for accommodations, criminal history, or racial or ethnic origin) only with your consent and where reasonably necessary for the recruitment process, or where otherwise permitted by law.
• Usual disclosures: we disclose personal information to the recipients described in Section 6 of Part A.
• Overseas disclosure: we are likely to disclose your personal information to recipients in the United States and India where NETGEAR affiliates or service providers involved in recruitment are located. We take reasonable steps to ensure overseas recipients handle it in accordance with the APPs.
• Automated decisions: we use the computer programs described in Section 5 of Part A. AI-assisted application review uses information from your application (such as skills, employment history, education, and application answers) to produce criteria matches that help us prioritize review. A person reviews every application before it is rejected, including confirming the AI determination for any application that does not match the criteria. Our fraud detection tool uses application information to identify fraudulent submissions, and our interview tools record, transcribe, and summarize interviews where used.
• Access and correction: you may request access to, or correction of, your personal information by contacting us. We will respond within a reasonable period, usually within 30 days.
• Complaints: you may complain about a breach of the APPs by contacting us as described in Section 13 of Part A. We will investigate and respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).
• Retention: we keep your information for two years after the recruitment process for the role ends, unless you join our talent community or a longer period is required by law.

Supplement 8: Japan

This supplement applies to Candidates for roles in Japan under the Act on the Protection of Personal Information ("APPI"). The business operator handling your personal information is NETGEAR Japan G.K., 3-7-5 Kyobashi Square, 12F, Kyobashi, Chuo-Ku, Tokyo 104-0031, Japan. Representative: Ryohei Onita, Executive Manager.

• Purposes of use: we use your personal information for the purposes in Section 4 of Part A. We will not use it beyond those purposes without your consent, except as permitted by law.
• Special care-required personal information: we will not obtain special care-required personal information (such as medical history or criminal records) without your prior consent, except as permitted by law. Consistent with the Employment Security Act and related guidelines, we do not collect information about your family origin, domicile of origin, beliefs, or other matters that may lead to discrimination.
• Provision to third parties: we provide personal information to third parties only with your consent or as permitted by law. Service providers that handle your information on our behalf are not third parties for this purpose, and we supervise them appropriately.
• Provision to a third party in a foreign country: with your consent, we provide your personal information to NETGEAR, Inc. in the United States, which operates our global recruiting systems, and to Ashby, Inc. in the United States. Information about the United States personal information protection system: the United States has no comprehensive federal personal information protection law equivalent to the APPI; protections are provided by sector-specific federal laws, the Federal Trade Commission's enforcement authority over unfair or deceptive practices, and state laws such as the California Consumer Privacy Act. NETGEAR, Inc. protects your personal information under our intra-group data transfer agreement, which requires access controls, security measures, and use only for the purposes in this Notice. You may request further information by contacting us.
• Security control measures: we have established data handling policies; designated persons responsible for personal information; restricted access to Candidate data to personnel who need it; trained personnel; implemented technical measures such as access control, authentication, encryption, and monitoring; and assessed the personal information protection systems of the foreign countries where your data is stored.
• Requests: you may request notification of the purposes of use of, disclosure of, correction, addition, or deletion of, suspension of use or erasure of, and suspension of provision to third parties of, your retained personal data, and disclosure of records of provision to third parties. Submit requests to privacypolicy@netgear.com. We will verify your identity before responding.
• Complaints and inquiries: privacypolicy@netgear.com.
• Retention: we keep your information for two years after the recruitment process for the role ends, unless a longer period is required by law.

Supplement 9: Republic of Korea

This supplement applies to Candidates for roles in the Republic of Korea under the Personal Information Protection Act ("PIPA") and the Fair Hiring Procedure Act. The personal information controller is NETGEAR International, Inc., Korea Branch, 203, Hangang Hyundai Hyel B/D, 213-12 Saechang-ro, Yongsan-gu, Seoul, Korea.

A. Consent to Collection and Use (Required)

B. Separate Consents

• Sensitive information: we will not collect sensitive information (such as health information) without your separate consent, except as permitted by law. You may refuse, and refusal will not affect your application, except that we may not be able to provide an accommodation.
• Unique identification information: we do not collect resident registration numbers from Candidates. We collect passport or alien registration numbers only where required by law, with your separate consent.
• Talent community (optional): with your separate consent, we will keep your information for 2 years to consider you for other roles. You may refuse without affecting your application.

C. Overseas Transfer of Personal Information

D. Your Rights and Other Matters

• Rights: you may request access to, correction or deletion of, or suspension of processing of your personal information, and withdraw consent, by contacting our Chief Privacy Officer. We will respond within 10 days.
• Automated decisions: A person reviews every application before it is rejected, including confirming the AI determination for any application that does not match the criteria for the role. We therefore do not make decisions about you through fully automated systems. If we do so in the future, you will have the right to refuse the decision or request an explanation, and we will publish the criteria and procedures.
• Return of application documents: under the Fair Hiring Procedure Act, if you are not hired, you may request the return of application documents you submitted in hard copy within 14 to 180 days after the hiring decision. We will return them within 14 days of your request. Documents submitted online or by email are not returned and will be destroyed at the end of the retention period.
• Destruction: when the retention period ends, we destroy electronic files using methods that prevent recovery and shred or incinerate paper records.
• Chief Privacy Officer: Kirsten Daru, Chief Legal, Security & Privacy Officer; email privacypolicy@netgear.com
• Remedies: you may seek help from the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118), the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972), or other authorities.

Supplement 10: Taiwan

This supplement is provided under Articles 8 and 9 of the Personal Data Protection Act ("PDPA") to Candidates for roles in Taiwan.

Supplement 11: India

This supplement applies to Candidates for roles in India under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (the "SPDI Rules") and, from the date its relevant provisions take effect, the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP Act"). Depending on where you apply, the Hiring Entity (the "data fiduciary" under the DPDP Act) is NETGEAR Research India Private Limited, 5th Floor, Embassy Star, No. 8 Palace Road, Vasanth Nagar, Bengaluru 560052 or NETGEAR Technologies India Private Limited, 517, S/F, Double Storey, New Rajendra Nagar, Central Delhi, New Delhi 110060.

A. Personal Data We Process and Why

We process the following personal data for the following specified purposes:

We do not ask for your Aadhaar number, financial account details, or biometric information during the application process.

B. Consent

• By submitting your application and selecting the consent checkbox, you consent to our processing of your personal data for the purposes above. Interview recording and AI note-taking, WhatsApp messages, and background checks each require your separate consent, and you may decline any of them without affecting your application (except that we cannot complete a required background check without your consent).
• You may withdraw consent at any time, as easily as you gave it, at privacypolicy@netgear.com or by contacting the Grievance Officer below. Withdrawal does not affect processing before withdrawal, but we may not be able to continue considering your application.
• If you are under 18, we will process your personal data only with verifiable consent from your parent or lawful guardian.

C. Your Rights

You have the right to:

• obtain a summary of the personal data we process about you, the processing activities, and the identities of other data fiduciaries and data processors with whom it has been shared;
• have your personal data corrected, completed, updated, or erased;
• have your grievances addressed by us;
• nominate another person to exercise your rights if you die or become incapacitated; and
• complain to the Data Protection Board of India (www.dpb.gov.in), after first using our grievance process.

To exercise your rights, use privacypolicy@netgear.com or contact the Grievance Officer. We will strive to resolve grievances within 30 days.

D. Transfers, Retention, and Contact

• Transfers: your personal data will be transferred to and stored in the United States by NETGEAR, Inc. and our applicant tracking system provider, and may be accessed by NETGEAR affiliates and service providers in other countries, under contracts that require reasonable security practices.
• Retention: we keep your personal data for two years after the recruitment process for the role ends, unless you consent to a longer period for our talent community or the law requires us to keep it longer, after which we erase it.
• Grievance Officer: Sundar Sankaran, Director, HRBP, sundar.sankaran@netgear.com.

Supplement 12: United Arab Emirates

This supplement applies to Candidates for roles in the United Arab Emirates under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"). The Hiring Entity is NETGEAR Asia Pte. Ltd. (Dubai Branch), Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

• Purposes and legal basis: we process your personal data for the purposes in Section 4 of Part A, on the basis of your consent, which you give when you submit your application, and where processing is necessary to take steps toward entering into an employment contract with you or to comply with UAE law.
• Withdrawal of consent: you may withdraw consent at any time by contacting us, without affecting processing before withdrawal, although we may then be unable to consider your application.
• Sharing and transfers: we share your personal data with the recipients in Section 6 of Part A. It will be transferred to and stored in the United States and may be accessed from other countries, under contractual safeguards that require the recipient to protect it. By applying, you consent to these transfers.
• Automated processing: A person reviews every application before it is rejected, including confirming the AI determination for any application that does not match the criteria for the role. We therefore do not make decisions about you based solely on automated processing. You may object to decisions based on automated processing, including profiling, that have legal consequences or seriously affect you.
• Your rights: you may request information about the personal data we process, a copy of it, and its correction, completion, or erasure; restrict or stop its processing; and object to processing, as provided by the PDPL. Contact us as described in Section 13 of Part A.
• Retention: we keep your personal data for 12 months after the recruitment process for the role ends, unless a longer period is required by law.
• Complaints: you may complain to the competent UAE data protection authority.