³ÉÈËVRÊÓƵ

Who is ³ÉÈËVRÊÓƵ and how can I contact you?

³ÉÈËVRÊÓƵ Corporation is a Canadian corporation, and the ³ÉÈËVRÊÓƵ group of companies is made up of numerous legal entities with offices located across the globe. Please see our full list of locations.

³ÉÈËVRÊÓƵ acts as a controller of your personal information where we determine how and why personal information can be used, and the ³ÉÈËVRÊÓƵ company that provides the specific Service ¡ª as identified therein ¡ª is the primary controller of your personal information. This Privacy Statement, however, does not apply where we act as a processor or service provider to another controller, such as our customers.

Any comments, complaints, or questions may be emailed to privacy.enquiries@thomsonreuters.com or mailed to our Chief Compliance Officer and Data Protection Officer: ³ÉÈËVRÊÓƵ, c/o Chief Compliance Officer, Landis + Gyr-Strasse 3, 6300 Zug, Switzerland.

For government and public-sector products and/or services, ³ÉÈËVRÊÓƵ may process Sensitive Government Personal Data and Government Customer Data (as these terms are defined in the Government Supplement) as a contractor, cloud service provider, service provider, processor, or similar role on behalf of the applicable government or public-sector customer. This data is owned by the federal, state and/or local entity.

What personal information do you collect and process?

For California residents, our required disclosures under CCPA are as described in our California Statement.

A note on children¡¯s online privacy: our online Services provide information solutions intended for professionals, and we do not knowingly collect any personal information from children under the age of 16.

How do you collect personal information?

• Direct interactions. You voluntarily provide your personal information when you interact with us, such as when you register for Services, fill in forms, and communicate with us. In some cases, if you do not provide us with your personal information, we may not be able to provide you with our services, communicate with you, or respond to your inquiries.

• User contributions. We collect your personal information when you or others upload, share, send, or input that information through our Services or networks or when you or they communicate with us.

• Automatically. We automatically collect personal information about you when you interact with us, such as when you use our Services, visit our offices or events, open emails or view advertisements from us, or communicate with us. We may collect some of this personal information by using cookies and other similar technologies and we recommend you review our Cookie & IBA Statement for more information.

How do you use personal information?

This section includes details of the purposes for which we use personal information and the different legal reasons ¡ª also called legal basis ¡ª for processing that personal information.

Who do you share personal information with?

• Your organizations and contacts.

• Affiliates within the ³ÉÈËVRÊÓƵ group of companies.

• Third-party service providers and partners that support our business, such as our content and other partners, vendors and subcontractors, analytics providers, advertising and marketing agencies, credit agencies, and other third parties we engage.

• Third parties to market their products or services to you.

• With governmental agencies and third parties involved in our sale or purchase of a business or assets, including in connection with a merger, divestiture, restructuring, reorganization, bankruptcy, liquidation, dissolution, or other disposition of assets.

• With law enforcement, government agencies, or other third parties in order to comply with any law, court order, legal request, or other legal process, as well as to enforce our agreements or protect the rights, property, or safety of our business, employees, customers, or others ¡ª including for the purposes of cybersecurity, fraud protection, and credit risk reduction.

• With others when necessary to fulfill your consents.

Where do you store personal information?

As described above, we are a global organization, so your personal information may be transferred outside of your home country and may be stored in and accessed from multiple countries, including the United States. When you interact with us, your personal information may be transferred outside of your home country, and you acknowledge the risk that we may transfer your personal information to countries that may provide less protection than your home country¡¯s privacy laws, and we may not be able to prevent government authorities in some countries from accessing your personal information.

For individuals located in the European Union, the United Kingdom, and Switzerland, please see our European Data Privacy Framework Supplemental Statement for how we transfer your personal data to the United States.

What steps do you take to secure personal information?

We work to implement technical and organizational measures designed to protect the security of personal information. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee its absolute security. The security of your information also depends on you: you are responsible for using unique, strong usernames and passwords for each of your accounts and for keeping those usernames and passwords confidential. We are not responsible for the circumvention of any privacy settings or cybersecurity measures contained in our Services, and any transmission of personal information is at your own risk.

How long do you retain personal information?

We retain personal information as required by our enterprise records retention schedule, which varies by Service, business function, country, record classes, and record types. We calculate the retention period based upon the time the personal information is needed to fulfill the purposes described in this Privacy Statement; meet the timelines required or recommended by regulators, professional bodies, or associations; comply with applicable laws, legal holds, and other legal obligations, including contractual obligations; and comply with your requests.

What rights do I have over my personal information?

Your local privacy laws may grant you rights with respect to your personal information, and we will not knowingly discriminate against you because you have exercised any of your privacy rights. These rights differ based on the local laws that apply to you but could include one or more of the following:

• Right to withdraw consent ¡ª when we process your personal data based on your consent ¡ª without affecting the lawfulness of processing based on consent before its withdrawal. 
• Right to confirm we process your personal information and, if so, to access ¡ª including, where possible, in a portable format ¡ª correct, complete, and delete your personal information. 
• Right to restrict or object to the processing of certain personal information, including, where relevant, the right to opt out of our processing of your sensitive personal information and opt out of automated decision making or profiling that produces a legal or similarly significant effect. 
• Right to opt out of marketing emails from us, in which you may email us or click the unsubscribe link at the bottom of each email that you receive from us.
• Residents of certain U.S. states may also have the right to opt out of the use of their personal information for profiling or targeted advertising, including online behavioral advertising, and to opt out of the sale or sharing of their personal information, in which you may, in addition to the below, click the ¡°Do not sell or share my personal information/limit the use of my sensitive personal information¡± link or change the cookie settings through our cookie banners. 

California residents may have the rights as described in our California Statement and requests for our Public Records Products can be submitted as described in our Public Records Privacy Statement.

To submit a request, you can contact us through our , email us at privacy.enquiries@thomsonreuters.com, or call us at 866-633-7656.

Important: These rights are not absolute and may be subject to exceptions. We are only required to honor these rights where applicable under local law and to the extent we act as a controller of the data.

You may appeal an adverse decision on your requests by emailing or writing to us, and you have the right to lodge a complaint to your local regulator or attorney general if you are not satisfied with our responses to your requests or how we manage your personal information. However, we encourage you to contact us first so we can address your concerns directly. Please note the following information:

• In Argentina, the Agency for Access to Public Information, in its capacity as the supervisory authority of Law No. 25,326, has the power to deal with complaints and claims filed by those affected in their rights for breach of the regulations in force regarding the protection of personal data.
• In South Africa, you may file a complaint with the Information Regulator via email at PAIAComplaints@inforegulator.org.za.
• In the European Union, supervisory authorities and their contact information may be found at .

How do you use artificial intelligence and automated processing?

Some ³ÉÈËVRÊÓƵ Services may use artificial intelligence, machine learning, automation, analytics, or similar technologies to provide, improve, personalize, secure, or support our Services. Where required by law or applicable product and/or service documentation, we provide additional information about automated processing, AI-enabled features, human review, opt-out options, or other controls.

Changes to this Privacy Statement

This Privacy Statement is expected to change over time. We reserve the right to update it at any time for any reason. We will notify you of changes to our Privacy Statement by updating the ¡°last updated¡± date and posting the updated Privacy Statement on this page. We may email periodic reminders of our notices and terms and conditions, but you should check our Services frequently to see the current Privacy Statement and any changes made to it.

If there are any differences between the English version of our Privacy Statement and a version translated into another language, the English version controls.

California Consumer Request Metrics

January 1 ¨C December 31, 2025

Supplemental Privacy Statements

Depending on the specific Service you are using or specific interactions you have with us ¡ª such as when you apply for a job or work for us ¡ª we may provide different or supplemental privacy statements that describe and govern how we use your personal information. When we do so, those different or supplemental privacy statements apply to that specific Service or those specific interactions. Of note, please review these supplemental privacy statements:

• For individuals located in the European Union, the United Kingdom, and Switzerland, please see our European Data Privacy Framework Supplemental Statement for how we transfer your personal data to the United States.

• For California Consumers, please review our Supplemental Privacy Statement for California Consumers (California Statement).

• For residents of China, please review our Supplemental Privacy Statement for Chinese Residents under PIPL

• For our content that is distributed within our Services ¡ª with respect to personal information included in such content ¡ª please review our Informational Content Privacy Statement.

• For our Risk, Fraud, and Compliance products (¡°Public Records Products¡±) ¡ª such as PeopleMap, Public Records on Westlaw, Company Investigator, Court Express, Batch Services, and CLEAR ¡ª please review our supplemental Public Records Privacy Statement.

• For Employees, External Staff, and Guests, please see our Thompson Reuters Global HR Privacy Policy available on the Thompson Reuters intranet.

• For Candidates, see our Thompson Reuters Candidate Privacy Policy made available during our recruitment process.

• For more information on our use of cookies and other automated technologies, as well as interest-based advertising, please review our Cookie & IBA Statement.

European Data Privacy Framework Supplemental Statement

All U.S. entities and subsidiaries of the ³ÉÈËVRÊÓƵ group of companies listed in our self-certification comply with the relevant EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. We have certified to the U.S. Department of Commerce that we adhere to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom ¡ª and Gibraltar ¡ª in reliance on the UK Extension to the EU-U.S. DPF. We have certified to the U.S. Department of Commerce that we adhere to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy statement and the EU-U.S. DPF Principles or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program and to view our certification, please visit .

The types of personal data we collect, the purposes for which we collect personal data, the categories of third parties to which we disclose personal data and the purposes for doing so, the right of individuals to access their personal data, and the choices and means we offer individuals for limiting the use and disclosure of their personal data are as set forth in our ³ÉÈËVRÊÓƵ Privacy Statement, above. We are committed to subjecting all personal data received from the EU, the UK, and Switzerland in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, respectively, to the DPF Principles. Under the DPF Accountability for Onward Transfer Principle, we remain responsible for any of your personal data that we share with third parties acting on our behalf. We may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, we commit to resolve DPF Principles-related complaints about our collection and use of your personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact us at ³ÉÈËVRÊÓƵ, c/o Chief Compliance Officer, Landis + Gyr-Strasse 3, 6300 Zug, Switzerland or via email at privacy.enquiries@thomsonreuters.com.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, we commit to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner¡¯s Office (ICO) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF in the context of the employment relationship.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, we commit to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States.  If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit for more information or to file a complaint. The services of JAMS are provided at no cost to you.

The Federal Trade Commission has jurisdiction over our compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. Under certain conditions, it may be possible for you to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms. Please visit for additional information.

We last updated this Data Privacy Framework Statement on July 31, 2026.

Effective Date: July 31, 2026

This U.S. Government Data Supplemental Privacy Statement ("Government Supplement") describes the government-specific protections that apply when ³ÉÈËVRÊÓƵ processes Sensitive Government Personal Data and/or Government Customer Data on behalf of U.S. federal, state and/or local government entities. When processing such data, ³ÉÈËVRÊÓƵ acts as a contractor, cloud service provider, processor, or similar role ¡ª not as a controller. This Government Supplement addresses ³ÉÈËVRÊÓƵ¡¯ data handling practices with respect to data it processes in this role on behalf of its U.S. federal, state and/or local government customers.

In the event of conflict, (i) a more specific U.S. federal and/or state government contract, authorization package, data processing addendum and/or FedRAMP addendum, security addendum, business associate agreement, Criminal Justice Information Services (CJIS) agreement, IRS Safeguards requirement, or agency instruction controls over this Government Supplement; and (ii) if additional contractual requirements are placed then the more specific contractual terms will always prevail.

1. Definition

2. ³ÉÈËVRÊÓƵ¡¯ Role and Responsibilities

For government services, ³ÉÈËVRÊÓƵ acts as a contractor, cloud service provider, processor, or similar role ¡ª not as a controller. The U.S. federal, state and/or local government customer determines the legal authority, purpose, permitted uses, and individual-rights procedures for ³ÉÈËVRÊÓƵ¡¯ access to Sensitive Government Personal Data and Government Customer Data.

³ÉÈËVRÊÓƵ supports the government customer's obligations as required by the applicable contract and law.  For applicable federal, state, and local cloud services, ³ÉÈËVRÊÓƵ has achieved FedRAMP Moderate ¡°In Process¡± status on certain products to support public sector and regulated industries and will host data in the Microsoft Azure Government, AWS GovCloud, and AWS East/West Commercial clouds. ³ÉÈËVRÊÓƵ is actively working with a federal agency sponsor to complete the full FedRAMP Moderate Authorization process, including implementing controls from NIST Special Publication 800-53 Revision 5, Security and Privacy Controls for Information Systems and Organizations to satisfy a variety of federal requirements, including but not limited to: Privacy Act of 1974, OMB Circular A-130, Managing Information as a Strategic Resource (July 28, 2016), Federal Information Security Modernization Act of 2014 (FISMA) (Pub. L. No. 113-283), and E-Government Act of 2002 (Pub. L. No. 107-347).

Sensitive Government Personal Data and Government Customer Data is stored within the United States and will be protected and kept within our FedRAMP environment. We do not transfer Sensitive Government Personal Data and Government Customer Data outside the United States.

Shared responsibilities between ³ÉÈËVRÊÓƵ and a government entity will be described in the applicable contract, service documentation, system security authorization package, or FedRAMP customer responsibility matrix, FedRAMP addendum, etc. Federal, state, and local contractual requirements may require additional safeguards.

FedRAMP authorization applies only to the specific product or service and authorization boundary described in the applicable authorization package ¡ª not to all ³ÉÈËVRÊÓƵ products or services. Federal agency customers may verify current authorization status at marketplace.fedramp.gov or by contacting their ³ÉÈËVRÊÓƵ account representative.

3. Prohibited Uses

Unless expressly authorized by the government customer and permitted by law and contract, ³ÉÈËVRÊÓƵ and its Authorized Vendors does not sell, share, rent, monetize, or use Government Customer Data and Sensitive Government Data for: interest-based or targeted advertising; cross-context behavioral advertising; third-party marketing; commercial data brokerage or resale; commercial data enrichment; unrelated product and/or service development; building or enhancing commercial public-records datasets; creating marketing profiles; profiling individuals for purposes unrelated to the Government Service; training or improving general-purpose or unrelated commercial AI/ML models; or any purpose inconsistent with the applicable contract, authorization package, data processing addendum, customer instructions, or law.

4. Regulated Government Data Categories

Not all ³ÉÈËVRÊÓƵ products and/or services are authorized to process all regulated data listed below. The U.S. federal, state, and/or local government entity is the controller of the regulated data and enters their data into ³ÉÈËVRÊÓƵ products as part of the applicable contract, service documentation, data processing addendum, and agency instructions. Additional data security and privacy requirements will vary by customer, contract, jurisdiction, and use case, which take precedent.  ³ÉÈËVRÊÓƵ will only process regulated government data on products that are compliant with appropriate statutory and regulatory requirements and is implementing controls within our products designed to safeguard regulated data.

The following are some of the regulated data types that ³ÉÈËVRÊÓƵ may process including but not limited to; Personally Identifiable Information (PII); Sensitive Personally Identifiable Information (SPII); Protected Critical Infrastructure Information (PCII); Sensitive Security Information (SSI) Federal Tax Information (FTI);  Criminal Justice Information (CJI); Health, Public Benefits, and Human Services Data; Protected Health Information (PHI) consistent with Health Insurance Portability and Accountability Act (HIPAA) requirements; Controlled Unclassified Information (CUI); Court, Judicial, and Corrections Data; Motor Vehicle and Transportation Data; Biometric, Surveillance, and Location Data; Homeland Security Acquisition Regulation 15-01 (HSAR); Other Sensitive Government Information.

5. How Do We Receive Sensitive Government Personal Data and Government Customer Data?

We do not independently collect Sensitive Government Personal Data and Government Customer Data from individuals directly. We receive Sensitive Government Personal Data and Government Customer Data directly from the U.S. federal and/or state government customers ¡ª either through direct submission to a ³ÉÈËVRÊÓƵ product/service or through authorized access to a government system.

6. How Do We Process Sensitive Government Personal Data and Government Customer Data?

We process Sensitive Government Personal Data and Government Customer Data only for the purposes authorized by the U.S federal and/or state government customer and permitted by applicable law and our contract with that agency 

Access to Government Customer Data and Sensitive Government Personal Data is granted to U.S persons and/or lawful permanent residents based on job function and is limited to the minimum number of individuals necessary for customer support. Access privileges are reviewed regularly and revoked when no longer needed.

7. Who Can Access Sensitive Government Personal Data and Government Customer Data

Access to Government Customer Data and Sensitive Personal Government data is limited to ³ÉÈËVRÊÓƵ employees, contractors, Authorized Vendors, sub processors, and third-party service providers who will be US persons and/or lawful permanent residents, have the proper need to know to this information and who are FedRAMP certified.

Authorized Vendors are subject to FedRAMP certification requirements where applicable. Each party above is subject to need-to-know access controls, applicable U.S personnel screening, and contractual data processing and confidentiality restrictions. Authorized Vendors are bound by contractual data processing and confidentiality restrictions as included in the FedRAMP contractual addendum.  Where subcontractors or third-party service providers are used to support a U.S. federal, state and/or local government customer, they must qualify as Authorized Vendors and are subject to the same requirements.  Additional access requirements may be placed within the contractual agreement which takes precedent.

8. How Long Do We Keep Sensitive Government Personal Data and Government Customer Data?

³ÉÈËVRÊÓƵ retains data per the customers¡¯ requirements. Retention, return, deletion, and disposal of Sensitive Government Personal Data and Government Customer Data are governed by the applicable contract, customer instructions, authorization package, backup cycles, legal holds, applicable law, and, where required, secure deletion standards mandated by the government National Archive and Records Administration (NARA) schedules.

9. Your Rights if Your Information Was Submitted by a U.S federal, state, and/or local government entity

If you are an individual whose personal information was submitted to ³ÉÈËVRÊÓƵ by a U.S. federal, state, and/or local entity, your primary point of contact for questions about that information is the government agency that submitted it. This is because the government agency is the controller of that data and is responsible for determining legal authority, purpose, and individual-rights procedures.

To exercise rights over your information, please contact the government agency that you believe submitted your information to ³ÉÈËVRÊÓƵ. The government agency is responsible for responding to Privacy Act, FOIA, open-records, and other individual-rights requests relating to information it submitted.

This Supplemental Privacy Statement for California Consumers (¡°California Statement¡±) supplements our Privacy Statement and further explains required disclosures about how we collect, disclose, and sell or share the personal information of California consumers and the rights that California consumers may have under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CCPA) where we act as a business under CCPA. When we use the term ¡°personal information¡± in this California Statement, we are using that term as CCPA defines it, which generally means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. However, personal information does not include publicly available, deidentified, or aggregate consumer information, which are all defined in CCPA.

What categories of personal information do you collect, and who do you share it with or sell it to?

In general, the categories of personal information we collect, sources of that information, business and commercial purposes for why we collect and use it and who we share it with, as well as our personal information retention practices, are as outlined in our Privacy Statement.

However, California law requires we restate some of this information for specific categories that are defined in CCPA. The type of personal information we collect and how we handle that personal information, including if we share or sell that personal information, depends on how you are specifically interacting with us and which Services you are inquiring about. In general, we have collected, disclosed for a business purpose, and sold or shared the following categories of personal information and sensitive personal information from California consumers within the last 12 months:

Please note that ³ÉÈËVRÊÓƵ does not ¡°sell¡± or ¡°share¡± the personal information of users of its legal services (including Westlaw) or its tax, audit, and accounting services.

We do not knowingly sell or share the personal information of children under the age of 16. As described above, sensitive personal information may be sold to or shared with third parties; see below for details on how to opt out of sales or sharing of personal information, including to limit the disclosure of sensitive personal information.

Also note that ³ÉÈËVRÊÓƵ may ¡°sell¡± or ¡°share¡± additional categories of personal information about California consumers in connection with its Public Records Products. For more information, including instructions on how to opt out such sales or sharing, please review our supplemental Public Records Privacy Statement.

Purposes for which personal information is collected and used

We collect and use personal information for the following purposes:

• To fulfill our contractual obligations, including registering your account and providing our Services, and to fulfill our obligations as an employer
• Communicate with you about our Services and process related transactions
• For any purpose, with your consent or to follow your instructions
• To operate, improve, or personalize our Services, corporate networks and devices, offices, events, and related infrastructure
• To annotate, tag, and add metadata to our content, including naming or tagging individuals in our news content
• Develop new products, services, content, and other offerings 
• Monitor the usage of our Services, corporate networks and devices, offices, events, and related infrastructure
• Audit usage of our Services, corporate networks and devices, offices, events, and related infrastructure, including consumer interactions
• Ensure the security of our Services, corporate networks and devices, offices, events, and related infrastructure
• Detect fraud and abuse, including for our Services, corporate networks and devices, offices, events, and related infrastructure
• Manage our internal operations, such as account administration, corporate asset deployment, billing, troubleshooting, and repair
• Provide our Services to third parties where our Services and content include your personal information. Under some local privacy laws, this may constitute a ¡°sale¡± of personal information
• Send you personalized and interest-based advertising and marketing 
• Improve and develop new marketing campaigns, segments, and materials
• To enable you to partake in a prize draw or competition or complete a survey
• Communicate with you regarding recruiting and alumni purposes
• Exercise our rights and protect our or others¡¯ rights or property 
• Effectuate the sale, merger, acquisition, or other disposition of our business
• Advance our other commercial and economic interests as permitted by law
• For other purposes as required by or permitted by law

Data retention

We retain personal information as required by our enterprise records retention schedule, which varies by Service, business function, country, record classes, and record types. We calculate the retention period based upon the time the personal information is needed to fulfill the purposes described in this Privacy Statement; meet the timelines required or recommended by regulators, professional bodies, or associations; comply with applicable laws, legal holds, and other legal obligations, including contractual obligations; and comply with your requests.

We take steps to permanently destroy any biometric data we maintain within the applicable timeframe specified by law or when it is no longer necessary to achieve the purpose for which it was collected or obtained, whichever occurs first. Initial purposes for collection may end, for example, when:

• The individual¡¯s identification has been verified
• The individual last interacts with or cancels their account for the Service that uses biometric data
• The contract that permitted the collection and use expires or is terminated
• The consent that permitted the collection and use is withdrawn

Your privacy rights

If you are a California consumer, you may have one or more of the following rights under CCPA:

• Right to confirm we process your personal information and, if so, to request we disclose to you: 
  • The categories of personal information we collected about you 
  • The categories of sources from which the personal information is collected 
  • The business or commercial purpose for collecting, selling, or sharing personal information 
  • The categories of third parties to whom we disclose personal information 
  • The specific pieces of personal information we have collected about you
• Right to access ¡ª which may include a portable copy ¡ª correct, complete, or delete specific pieces of personal information we hold about you.
• Right to request that we delete certain personal information that we hold about you, subject to certain exceptions.
• Right to request correction of inaccurate information we hold about you.
• Right to limit our use and disclosure of your sensitive personal information.
• Right to opt out of the sale of personal information, as sale is defined under CCPA. 
• Right to opt out of the sharing of personal information, as sharing is defined under CCPA.
• Right not to receive discriminatory treatment for exercising your rights under CCPA.
• Additionally, California Civil Code Section 1798.83 may permit you the right to request information regarding the personal information about you we disclose to third parties for the third parties¡¯ direct marketing purposes.

To make a request, you can contact us through our , by emailing us at privacy.enquiries@thomsonreuters.com, or by calling us at 866-633-7656. Requests to opt out of the sale and sharing of personal information can also be submitted by clicking this ¡°Do not sell or share my personal information and limit the use of my sensitive personal information¡± link and following the instructions on that page. See our Cookie Policy for more information on exercising your rights

Please provide us with enough information to verify your identity. We will use the information you provide to us to verify your request and to match your request to the information that we may hold about you in our systems. If we cannot initially verify your identity, we may request additional information to complete the verification process, such as a copy of your driver¡¯s license or a recent utility or credit card bill. You can designate an agent to make a request on your behalf by either having your agent using the Data Subject Rights Portal described above or by sending us a letter, signed by you, certifying that the agent is acting on your behalf; or, as an alternative, by you and the agent executing and sending us a notarized power of attorney stating that the agent is authorized to act on your behalf. Please note that we may still require you to verify your identity before we process a request submitted by your agent.

Important: these rights are not absolute and may be subject to exceptions. We are only required to honor these rights where applicable under local law and to the extent that we act as a ¡°business¡± as defined by CCPA with respect to that personal information. You may appeal an adverse decision on your requests by emailing or writing to us, and you have the right to lodge a complaint with the California Attorney General if you are not satisfied with our responses to your requests or how we manage your personal information. However, we encourage you to contact us first so we can address your concerns directly.

We last updated this Supplemental Privacy Statement for California Consumers on July 31, 2026

This Cookie & IBA Statement supplements our Privacy Statement and specifically explains how we and our third-party business partners deploy cookies and other tracking technologies (¡°Tracking Technologies¡±) in connection with some of our Services, including for interest-based advertising (IBA), as well as the options you have to control them.

What are cookies and other tracking technologies?

Cookies are small text files placed on browsers, computers, and other devices to hold data. Web beacons, tags, pixels, embedded scripts, and other tracking technologies temporarily download pieces of code to remember information about website users and usage. Cookies and other tracking technologies are commonly used to identify users, remember their preferences, track their browsing activities, perform analytics on the use of our Services, and enable targeted advertising based on their online behavior.

These Tracking Technologies may be operated and set by us (¡°first-party trackers¡±) or by our third-party business partners, such as social media networks, advertising networks, and content providers (¡°third-party trackers¡±). They can be set either for a single visit through a ¡°session tracker¡± so they are deleted after that visit or remain on your device to persist for multiple repeat visits through a ¡°persistent tracker.¡±

Why do we use cookies and other tracking technologies?

We use Tracking Technologies for several different purposes. These technologies are widely used to remember you and your preferences and understand how you interact with us so that we may perform essential functions, such as providing our Services or delivering content and allowing users to register and remain logged in; personalize our Services and content and ensure a quality, consistent, and efficient experience for our users; analyze your usage of our Services and interactions with content, including emails; and to deliver and measure advertising, including IBA. We may also use these technologies to collect information about your online activities over time and across devices, third-party websites, or other online services.

How can you control the use of Tracking Technologies?

You may wish to restrict the use of cookies or completely prevent them from being set. Most modern browsers allow you to change your cookie and other tracker settings, and you can usually find these settings in your browser's options or preferences menu. Flash cookies can only be deleted within Adobe Flash rather than via your browser; please refer to for information on how to manage Flash cookies. Additionally, you can opt out of Google Analytics by installing . 

Depending on where you live and the Service you are interacting with, you may also see a ¡°cookie banner¡± on some of our Services, which allows you to manage our use of cookies and other tracking technologies ¡ª click on the banner for more information regarding which cookies are used on that particular Service and what you may disable, but please note that you cannot disable any Tracking Technologies that are categorized as strictly necessary. These controls may not be available in all jurisdictions or for all Services.

Please be aware that some of the features of our Services may not function correctly if you disable all cookies or other technologies.

Do you honor ¡°do not track¡± signals?

Generally, we do not currently respond to or take any action with respect to web browser ¡°do not track¡± signals; however, in some instances, our third-party business partners that integrate with our Services will honor ¡°do not track¡± signals.

What is Interest-Based Advertising?

Interest-based advertising (IBA) is also commonly referred to as targeted advertising, online behavioral advertising, and personalized advertising, and it generally means the delivery of personalized or targeted advertising to you that is tailored to your specific interests and demographics. IBA may also include analytics and reporting related to those advertisements, such as ad measurement and attribution, segmentation, and market research.

We may send you IBA based on the use of Tracking Technologies and other information you make available to us when you interact with some of our Services, our content, or our advertisements. We engage various third-party business partners to serve you IBA and we may share with those third-party business partners certain information about you and our Tracking Technologies to do so. Some of these third parties will deploy their own Tracking Technologies on our Services and content when doing so, wherein they automatically receive your IP address, browser or device information, and other information from these Tracking Technologies.

Some of our third-party business partners ¡ª and their business partners ¡ª may also use or provide us with additional information about you that they have independently collected from offline and online sources to better target and provide you with more relevant and useful advertising. Some of these third parties may collect personal information about your online activities over time and across different websites. Please note that we do not control the privacy practices of these third parties and their privacy practices are not covered by this Privacy Statement. If you have any questions about an advertisement or other targeted content, you should contact the responsible provider directly.

How can you opt out of IBA?

In addition to the above, you may also be able to choose not to receive IBA from participating companies that participate with any of the following:

• The Digital Advertising Alliance (DAA), in which you may opt out of IBA using this  
• The Network Advertising Initiative (NAI), in which you may opt out of IBA using this and, for those in the EU/EEA,
• The for opting out on mobile devices

Certain mobile devices may have an advertising identifier that allows companies to serve IBA to a specific mobile device using that identifier. Depending on your specific device, you may be able to limit advertising or sharing of that advertising identifier. You can also reset the advertising identifier or choose to turn off the device¡¯s location tracking ¡ª including precise geolocation tracking ¡ª on your mobile device or for certain applications. See your device manufacturer to understand which options are available to you. For more details on your choices regarding the use of your web browsing activity for IBA, you may also visit the following sites: , , , and . 

Next, some of our Services may also display ¡°Do not sell my personal information or do not share my personal information¡± links ¡ª or similarly named links ¡ª in which clicking those links may allow you to opt out of the ¡°sharing¡± or ¡°selling¡± of your personal information as required by certain local privacy laws. Doing so may limit the manner in which we and our third-party business partners may use your personal information in connection with IBA.

Please note that some of the options described above are browser specific or device specific, so you may need to opt out again if you use a different device or change browsers. Please also note that even if you opt out of receiving IBA, you may still receive advertisements and marketing materials, but they may not be personalized to you specifically.

We last updated this Cookie & IBA Statement on July 31, 2026.

1. Introduction

As a global business information services company, we proudly distribute informational content within our Services. This Informational Content Privacy Statement supplements the above Privacy Statement and further explains how we distribute and curate this informational content as part of our Services.

2. Why does ³ÉÈËVRÊÓƵ publish informational content?

³ÉÈËVRÊÓƵ publishes various types of content, such as statutes, laws, regulations, rules, court cases, opinions, expert analysis, articles, forms, public records, treatises, dictionaries, and many other types of information that we believe have professional and jurisprudential value for our customers or the general public.

3. How does ³ÉÈËVRÊÓƵ obtain informational content?

³ÉÈËVRÊÓƵ obtains informational content in a number of ways ¡ª sometimes we purchase or license the content from others; sometimes we receive the content pursuant to a contract where we are required to curate and distribute the content; sometimes we commission the content ourselves; and sometimes the content is collected from a number of public sources, like public records, journalistic sources, and information in the public domain. Any personal information contained in informational content that is subsequently distributed by ³ÉÈËVRÊÓƵ originates from the original text of the informational content.

4. How does ³ÉÈËVRÊÓƵ curate informational content?

In addition to distributing the informational content, ³ÉÈËVRÊÓƵ curates the content ¡ª in other words, ³ÉÈËVRÊÓƵ prepares and provides summaries, metadata, or other related information concerning the original content. For example, reported cases in our legal products might include a headnote, key cite, and other metadata, as well as the original full-text court case. In many cases, ³ÉÈËVRÊÓƵ prepares the curation of the content. Any personal information contained in the curation is derived from personal information included in the original information content supplied by the source of that content.

5. Does ³ÉÈËVRÊÓƵ edit or change the substances of the original information content?

Except for clerical or typographical errors and format changes in compliance with editorial house styles and except as directed by the source of the original information content, ³ÉÈËVRÊÓƵ does not edit or change the substance of the original information content in most cases.

6. What if I want to change or delete my personal information contained in the information content or just want the informational content removed?

In many cases, ³ÉÈËVRÊÓƵ is not the source of the information content, and we are not obliged to change or delete the substance of the original content ¡ª including any personal information ¡ª unless we receive a verified request from the source of the information content; for example, a court order from the court that issued the court case in the first place.
If you have any questions or concerns regarding the substance of any informational content or your personal information as contained in that information content, please contact the source of the informational content and work with them directly to resolve your questions or concerns.

We last updated this Informational Content Privacy Statement on July 31, 2026.

This Supplemental Privacy Statement for Chinese Residents under PIPL (¡°Chinese Statement¡±) supplements our Privacy Statement and further explains required disclosures about how we collect and process the personal information of individuals resident in China and the rights that Chinese residents may have under the Personal Information Protection Law of the People¡¯s Republic of China (¡°PIPL¡±) where we act as a personal information processor pursuant to PIPL. Solely for the purpose of this Privacy Statement, the term ¡°China¡± or ¡°PRC¡± refers to the People¡¯s Republic of China and does not include Hong Kong, Macau and Taiwan.

When we use the term ¡°personal information¡± in this Chinese Statement, we are using that term as PIPL defines it, which generally means information related to an identified or identifiable natural person that is recorded electronically or otherwise, excluding anonymized information.

For individuals (excluding job applicants) resident in China, the controller (i.e., the personal information processor as defined under the PIPL) of their personal information is ³ÉÈËVRÊÓƵ (Beijing) Technology Development Co. Ltd. For job applicants resident in China, the controller of their personal information is ³ÉÈËVRÊÓƵ Canada Limited.

This Privacy Statement applies to customers and users (including prospective customers and users), third party business partners and other individuals who interact with us or whose personal information we maintain, resident in China, but does not apply to Chinese employees, the processing of personal information of whom has been described in the ³ÉÈËVRÊÓƵ ¨C China Employee Privacy Notice.

Processing of sensitive personal information

¡°Sensitive personal information¡± is defined in the PIPL as personal information, that, if leaked or if used illegally, is likely to cause harm to a natural person¡¯s personal dignity or endanger his or her personal safety or the safety of his or her property, including information concerning biometrics, religious beliefs, particular capacity, medical treatments, health, financial accounts, tracking, as well as personal information of minors under the age of 14. Among the various categories of personal information we may collect as described in the ¡°What personal information do you collect and process?¡± section of this Privacy Statement, the following may be considered as sensitive personal information:

• Account information including purchase history; 
• Pictures, audio, and video recordings 
• Identity information;
• Financial information;
• Legal information

We will process your sensitive personal information for the specific purposes as described in this Privacy Statement, and in a way that has the least impact on your personal rights and interests. By interacting with us, you will be deemed as having consented to our collection and processing of your sensitive personal information in accordance with this Privacy Statement.

Legal basis and purposes for the processing of personal information

We may, where applicable under the Chinese laws, rely on some or all of the following applicable legal bases for the processing of your personal information: (i) your consent (¡°Your Consent¡±), (ii) the necessity to conclude or perform a contract to which you are a party (¡°Contract Basis¡±), (iii) the necessity to perform a statutory duty or legal obligation (¡°Legal Obligation Basis¡±); (iv) the necessity to safeguard your life safety, health and property safety in emergency situations (¡°Emergency Basis¡±); (v) personal information has been made public by you or has otherwise been lawfully made public, and our processing is done pursuant to the PIPL and the extent of the processing is reasonable (¡°Public Information Basis¡±); and (vi) other circumstances as stipulated in Chinese laws.

The below table includes the relevant purposes for the personal information processing and the corresponding legal basis. This table is for indicative purposes only, and in practice, there may be some variations based on the circumstances.

Sharing of personal information

We may share your personal information to the recipients as prescribed in the ¡°Who do you share personal information with?¡± section of this Privacy Statement.  Depending on how you interact with us and as required by applicable law, we provide notice of recipients at the time of data collection. If we provide your personal information to additional recipients, we will follow and adopt the applicable process and requirements required by the applicable law (including the PIPL) in respect of the provision of your personal information. By interacting with us, you will be deemed as having consented to our sharing of your personal data to the foregoing recipients in accordance with this Privacy Statement.

Provision of personal information outside of China

As mentioned in the ¡°Where do you store personal information?¡± section of this Privacy Statement, your personal information may be transferred outside of China. The details of the outbound provision of your personal information are set out below:

• Recipient: ³ÉÈËVRÊÓƵ Canada Limited
• Country of the Recipient: Canada
• Types of personal information: Please refer to the ¡°What personal information do you collect and process?¡± section of this Privacy Statement
• Purposes: Please refer to the ¡°Legal basis and purposes for the processing of personal information¡± section of this China Statement
• Contact information of the recipient: You may contact ³ÉÈËVRÊÓƵ by emailing us at privacy.issues@thomsonreuters.com or mailing to our Chief Compliance Officer and Data Protection Officer: ³ÉÈËVRÊÓƵ, Landis + Gyr-Strasse 3, 6300 Zug, Switzerland.

Your rights

If you are resident in China, you may have one or more of the following rights under PIPL:

• Right of access and copy: You have the right to access and copy the personal information concerning you.
• Right to rectification: You have the right to request us to rectify inaccurate personal information concerning you or supplement incomplete personal information.
• Right to erasure: You have the right to ask us to erase your personal information in certain circumstances specified under the applicable law. However, your right to erasure will not affect the lawfulness of our processing prior to the erasure request or processing based on the applicable legal bases.
• Right to explanation: You have the right to require us to further explain our rules of processing of personal information to the extent that are unclear or not addressed in this Privacy Statement.
• Right to transfer: You have the right to request us to transfer your personal information that we hold about you to another controller to the extent the conditions stipulated by the applicable law are fulfilled.
• Right to withdraw your consent: If you have given your consent regarding certain types of processing activities, you can withdraw this consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal or processing based on the applicable legal bases.
• Other rights permitted by the applicable law.

To submit a request, you can contact us through our or email us at privacy.issues@thomsonreuters.com. Please provide us with enough information to verify your identity. We will use the information you provide to us to verify your request.

Important: These rights are not absolutely guaranteed and there are several exceptions where we may not have an obligation to fulfill your request. We are only required to honor these rights to the extent that they have been granted to you and apply to you under PIPL.

Contact us

If you wish to exercise your rights or have any comments, complaints or questions on or about this Privacy Statement, this China Statement and/or our processing of your personal information, please email us at privacy.issues@thomsonreuters.com.

We last updated this China Statement on July 31, 2026.