9 Code of Conduct Doing it right in the workplace Fair compensation and labor laws No matter where we work, we must follow all labor laws that apply to us. Everyone who works for AAR or a third-party business partner must be treated fairly and respectfully. How we own it • Follow all laws related to working hours, working conditions and compensation. • AAR has a zero-tolerance policy regarding trafficking in persons and forced labor. Keep an eye out for indications of forced labor or human trafficking, whether by AAR or any third-party business partner we work with, and report any suspicious activity immediately. See the Equal Employment Opportunity, Equal Employment Policy for Protected Veterans and Individuals with Disabilities, and Contracting with the U.S. Government policies for more information. Protecting employee personal information Doing It Right in the workplace also means protecting personal data we may have access to about our fellow employees. Personal data might include contact information, marital status, health information or national identification number. No matter what form it takes, we must always safeguard this information. How we own it • If your job responsibilities give you access to personal data, use it only for business purposes and take precautions to keep the information confidential. • Understand and follow all AAR policies and data privacy laws that relate to protecting personal data, including collection, storage, sharing and destruction of this information. See the Employee HIPAA Privacy, and Privacy Policy for Employee Information from the European Economic Area policies for more information.