Common use of Data Protection in Canada Clause in Contracts

Data Protection in Canada. To the extent that the Content, if any, that Customer sends, receives, or stores via Ordered SaaS Services provided to a Customer Location in Canada includes “personal information” as defined under the Personal Information Protection and Electronic Documents Act (2000, c. 5) (PIPEDA) (“Canada Personal Information”), 8x8 shall use and disclose such Canada Personal Information solely (a) for the purpose of fulfilling 8x8’s obligations or exercising 8x8’s rights under the Agreement (which shall, for clarity, include providing, supporting, or enhancing (e.g., performing quality control functions) the SaaS Services), (b) as approved in advance in writing by Customer, (c) in accordance with Customer’s instructions, or (d) for the purpose of complying with laws or regulations, including without limitation in response to legal process or court or administrative order or ruling. To the extent that Customer otherwise submits Canada Personal Information to 8x8 via any Ordered SaaS Services provided to a Customer Location in Canada, 8x8 shall use and disclose such Canada Personal Information solely as set forth in the Privacy Notice. 8X8 VIRTUAL OFFICE AND VIRTUAL CONTACT CENTER USE POLICY Last Updated: August 2, 2019

Data Protection in Canada. To the extent that the Content, if any, that Customer sends, receives, or stores via Ordered SaaS Services provided to a Customer Location in Canada includes “personal information” as defined under the Personal Information Protection and Electronic Documents Act (2000, c. 5) (PIPEDA) (“Canada Personal Information”), 8x8 shall use and disclose such Canada Personal Information solely (a) for the purpose of fulfilling 8x8’s obligations or exercising 8x8’s rights under the Agreement (which shall, for clarity, include providing, supporting, or enhancing (e.g., performing quality control functions) the SaaS Services), (b) as approved in advance in writing by Customer, (c) in accordance with Customer’s instructions, or (d) for the purpose of complying with laws or regulationsLaws, including without limitation in response to legal process or court or administrative order or rulingprocess. To the extent that Customer otherwise submits Canada Personal Information to 8x8 via any Ordered SaaS Services provided to a Customer Location in Canada, 8x8 shall use and disclose such Canada Personal Information solely as set forth in the Privacy Notice. 8X8 VIRTUAL OFFICE AND VIRTUAL CONTACT CENTER USE POLICY Last Updated: August 2May 16, 20192018

Data Protection in Canada. To the extent that the Content, if any, that Customer sends, receives, or stores via Ordered SaaS Services provided to a Customer Location in Canada includes “personal information” as defined under the Personal Information Protection and Electronic Documents Act (2000, c. 5) (PIPEDA) (“Canada Personal Information”), 8x8 shall use and disclose such Canada Personal Information solely (a) for the purpose of fulfilling 8x8’s obligations or exercising 8x8’s rights under the Agreement (which shall, for clarity, include providing, supporting, or enhancing (e.g., performing quality control functions) the SaaS Services), (b) as approved in advance in writing by Customer, (c) in accordance with Customer’s instructions, or (d) for the purpose of complying with laws or regulationsLaws, including without limitation in response to legal process or court or administrative order or rulingprocess. To the extent that Customer otherwise submits Canada Personal Information to 8x8 via any Ordered SaaS Services provided to a Customer Location in Canada, 8x8 shall use and disclose such Canada Personal Information solely as set forth in the Privacy Notice. 8X8 VIRTUAL OFFICE AND VIRTUAL CONTACT CENTER USE POLICY Last Updated: August 2, 2019.

Data Protection in Canada. To the extent that the Content, if any, that Customer sends, receives, or stores via Ordered SaaS Services provided to a Customer Location in Canada includes “personal information” as defined under the Personal Information Protection and Electronic Documents Act (2000, c. 5) (PIPEDA) (“Canada Personal Information”), 8x8 shall use and disclose such Canada Personal Information solely (a) for the purpose of fulfilling 8x8’s obligations or exercising 8x8’s rights under the Agreement (which shall, for clarity, include providing, supporting, or enhancing (e.g., performing quality control functions) the SaaS Services), (b) as approved in advance in writing by Customer, (c) in accordance with Customer’s instructions, or (d) for the purpose of complying with laws or regulations, including without limitation in response to legal process or court or administrative order or ruling. To the extent that Customer otherwise submits Canada Personal Information to 8x8 via any Ordered SaaS Services provided to a Customer Location in Canada, 8x8 shall use and disclose such Canada Personal Information solely as set forth in the Privacy Notice. 8X8 VIRTUAL OFFICE AND VIRTUAL CONTACT CENTER USE POLICY 8x8 Virtual Office and Virtual Contact Center Use Policy Last Updated: August 2, 2019

Data Protection in Canada. To the extent that the Content, if any, that Customer sends, receives, or stores via Ordered SaaS Services provided to a Customer Location in Canada includes “personal information” as defined under the Personal Information Protection and Electronic Documents Act (2000, c. 5) (PIPEDA) (“Canada Personal Information”), 8x8 shall use and disclose such Canada Personal Information solely (a) for the purpose of fulfilling 8x8’s obligations or exercising 8x8’s rights under the Agreement (which shall, for clarity, include providing, supporting, or enhancing (e.g., performing quality control functions) the SaaS Services), (b) as approved in advance in writing by Customer, (c) in accordance with Customer’s instructions, or (d) for the purpose of complying with laws or regulations, including without limitation in response to legal process or court or administrative order or ruling. To the extent that Customer otherwise submits Canada Personal Information to 8x8 via any Ordered SaaS Services provided to a Customer Location in Canada, 8x8 shall use and disclose such Canada Personal Information solely as set forth in the Privacy Notice. 8X8 VIRTUAL OFFICE AND VIRTUAL CONTACT CENTER USE POLICY Last Updated: August 2, 2019.

Data Protection in Canada. To the extent that the Content, if any, that Customer sends, receives, or stores via Ordered SaaS Services provided to a Customer Location in Canada includes “personal information” as defined under the Personal Information Protection and Electronic Documents Act (2000, c. 5) (PIPEDA) (“Canada Personal Information”), 8x8 shall use and disclose such Canada Personal Information solely (a) for the purpose of fulfilling 8x8’s obligations or exercising 8x8’s rights under the Agreement (which shall, for clarity, include providing, supporting, or enhancing (e.g., performing quality control functions) the SaaS Services), (b) as approved in advance in writing by Customer, (c) in accordance with Customer’s instructions, or (d) for the purpose of complying with laws or regulations, including without limitation in response to legal process or court or administrative order or ruling. To the extent that Customer otherwise submits Canada Personal Information to 8x8 via any Ordered SaaS Services provided to a Customer Location in Canada, 8x8 shall use and disclose such Canada Personal Information solely as set forth in the Privacy Notice. 8X8 VIRTUAL OFFICE AND VIRTUAL CONTACT CENTER USE POLICY Last Updated: August 2May 16, 20192018