Common use of Retention of Information Clause in Contracts

Retention of Information. Your personal data will be retained in accordance with the Company’s legitimate business needs and for purposes of compliance with legal, regulatory, audit and tax requirements for as long as allowed by applicable law. After this period, personal data will be deleted, unless the Company has a legal basis to retain it for a different purpose. Privacy Rights Depending on the laws applicable to your location (e.g., European Economic Area, Switzerland, United Kingdom, and various US state laws), you may have the right to request access to, modify, export, delete, etc. your personal data. These rights are not absolute and only apply in certain circumstances. This means that the Company may be unable or not obligated to grant your request, for example, due to legal requirements to which the Company is subject. 110 In some cases, in order to grant a request to exercise your rights, the Company may need to collect additional information from you to verify your identity, such as a government-issued identification. The Company will not discriminate against you for exercising your rights, but you will be unable to participate in the Plan if the Company is not able to process your personal data. In many countries (e.g., European Economic Area Member States, Switzerland, the United Kingdom, etc.) the country Data Protection Authority (DPA) is responsible for making sure that applicable data protection laws are followed. For more information about your privacy rights, or if you wish to file a complaint, you may contact your local DPA. A list of European Union supervisory authorities is available here: hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en; United Kingdom - Information Commissioner’s Office (ICO): hxxxx://xxx.xxx.xx; Switzerland – Federal Data Protection and Information Commissioner: Data Protection - Switzerland (axxxx.xx). In compliance with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Blueprint Medicines commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to BBB NATIONAL PROGRAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit wxx.xxxxxxxxxxx.xxx/xxx-xxxxxxxxxx for more information or to file a complaint. The services of BBB NATIONAL PROGRAMS are provided at no cost to you. If your complaint involves human resources data transferred to the United States from the European Union or Switzerland in the context of the employment relationship, and the Company does not address it satisfactorily, the Company commits to cooperate with the panel established by the EU data protection authorities (DPA Panel), and the Swiss Federal Data Protection and Information Commissioner and to comply with the advice given by the DPA panel or FDPIC with regard to such human resources data. To pursue an unresolved human resources complaint, you should contact the state or national data protection or labor authority in the appropriate jurisdiction. Contact details for the EU data protection authorities can be found at hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en. Complaints related to human resources data should not be addressed to the BBB NATIONAL PROGRAMS. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See hxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/x/article/ANNEX-I-introduction-dpf. Contact Us For questions about this Privacy Notice, to exercise applicable rights related to your personal data, or for more information about the Company’s privacy and data protection practices, please contact us at the appropriate locations: EEA, Switzerland, or UK EXXxxxxxx@xxxxxxxxxxxxxxxxxx.xxx 111 United States Pxxxxxx@xxxxxxxxxxxxxxxxxx.xxx EXHIBIT B RESTRICTED STOCK UNIT AWARD AGREEMENT FOR NON-EMPLOYEE DIRECTORS UNDER THE BLUEPRINT MEDICINES CORPORATION 2024 STOCK INCENTIVE PLAN Country-Specific Terms and Conditions Capitalized terms used but not otherwise defined herein shall have the meaning given to such terms in the Blueprint Medicines Corporation 2024 Stock Incentive Plan as may be amended and restated and the Restricted Stock Unit Award Agreement for Non-Employee Directors, including its Exhibit A. Terms and Conditions This Exhibit B includes additional terms and conditions that govern the Award if the Grantee provides services and/or resides in one of the countries included herein. These terms and conditions are in addition to, or, if so indicated, in place of, the terms and conditions set forth in the Restricted Stock Unit Award Agreement for Non-Employee Directors. If the Grantee is a citizen or resident (or is considered as such for local law purposes) of a country other than the one in which the Grantee is currently residing and/or providing services or if the Grantee transfers residency and/or Service Relationship to another country after the Restricted Stock Units are granted, the Administrator shall, in its discretion, determine to what extent the additional terms and conditions contained herein shall apply to the Grantee.

Retention of Information. Your personal data will be retained in accordance with the Company’s legitimate business needs and for purposes of compliance with legal, regulatory, audit and tax requirements for as long as allowed by applicable law. After this period, personal data will be deleted, unless the Company has a legal basis to retain it for a different purpose. Privacy Rights Depending on the laws applicable to your location (e.g., European Economic Area, Switzerland, United Kingdom, and various US state laws), you may have the right to request access to, modify, export, delete, etc. your personal data. These rights are not absolute and only apply in certain circumstances. This means that the Company may be unable or not obligated to grant your request, for example, due to legal requirements to which the Company is subject. 110 In some cases, in order to grant a request to exercise your rights, the Company may need to collect additional information from you to verify your identity, such as a government-issued identification. The Company will not discriminate against you for exercising your rights, but you will be unable to participate in the Plan if the Company is not able to process your personal data. In many countries (e.g., European Economic Area Member States, Switzerland, the United Kingdom, etc.) the country Data Protection Authority (DPA) is responsible for making sure that applicable data protection laws are followed. For more information about your privacy rights, or if you wish to file a complaint, you may contact your local DPA. A list of European Union supervisory authorities is available here: hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en; United Kingdom - Information Commissioner’s Office (ICO): hxxxx://xxx.xxx.xx; Switzerland – Federal Data Protection and Information Commissioner: Data Protection - Switzerland (axxxx.xx). In compliance with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Blueprint Medicines commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to BBB NATIONAL PROGRAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit wxx.xxxxxxxxxxx.xxx/xxx-xxxxxxxxxx for more information or to file a complaint. The services of BBB NATIONAL PROGRAMS are provided at no cost to you. If your complaint involves human resources data transferred to the United States from the European Union or Switzerland in the context of the employment relationship, and the Company does not address it satisfactorily, the Company commits to cooperate with the panel established by the EU data protection authorities (DPA Panel), and the Swiss Federal Data Protection and Information Commissioner and to comply with the advice given by the DPA panel or FDPIC with regard to such human resources data. To pursue an unresolved human resources complaint, you should contact the state or national data protection or labor authority in the appropriate jurisdiction. Contact details for the EU data protection authorities can be found at hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en. Complaints related to human resources data should not be addressed to the BBB NATIONAL PROGRAMS. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See hxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/x/article/ANNEX-I-introduction-dpf. hxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/x/article/ANNEX-I-introduction-dpf Contact Us For questions about this Privacy Notice, to exercise applicable rights related to your personal data, or for more information about the Company’s privacy and data protection practices, please contact us at the appropriate locations: EEA, Switzerland, or UK EXXxxxxxx@xxxxxxxxxxxxxxxxxx.xxx 111 United States Pxxxxxx@xxxxxxxxxxxxxxxxxx.xxx EXHIBIT B RESTRICTED NON-QUALIFIED STOCK UNIT AWARD OPTION AGREEMENT FOR NON-EMPLOYEE DIRECTORS EMPLOYEES UNDER THE BLUEPRINT MEDICINES CORPORATION 2024 STOCK INCENTIVE PLAN Country-Specific Terms and Conditions Capitalized terms used but not otherwise defined herein shall have the meaning given to such terms in the Blueprint Medicines Corporation 2024 Stock Incentive Plan as may be amended and restated and the Restricted Non-Qualified Stock Unit Award Option Agreement for Non-Employee DirectorsEmployees, including its Exhibit A. Terms and Conditions This Exhibit B includes additional terms and conditions that govern the Award if the Grantee provides services and/or resides in one of the countries included herein. These terms and conditions are in addition to, or, if so indicated, in place of, the terms and conditions set forth in the Restricted Stock Unit Award Agreement for Non-Employee Directors. If the Grantee is a citizen or resident (or is considered as such for local law purposes) of a country other than the one in which the Grantee is currently residing and/or providing services or if the Grantee transfers residency and/or Service Relationship to another country after the Restricted Stock Units are granted, the Administrator shall, in its discretion, determine to what extent the additional terms and conditions contained herein shall apply to the Grantee.A.

Retention of Information. Your personal data will be retained in accordance with the Company’s legitimate business needs and for purposes of compliance with legal, regulatory, audit and tax requirements for as long as allowed by applicable law. After this period, personal data will be deleted, unless the Company has a legal basis to retain it for a different purpose. Privacy Rights Depending on the laws applicable to your location (e.g., European Economic Area, Switzerland, United Kingdom, and various US state laws), you may have the right to request access to, modify, export, delete, etc. your personal data. These rights are not absolute and only apply in certain circumstances. This means that the Company may be unable or not obligated to grant your request, for example, due to legal requirements to which the Company is subject. 110 In some cases, in order to grant a request to exercise your rights, the Company may need to collect additional information from you to verify your identity, such as a government-issued identification. The Company will not discriminate against you for exercising your rights, but you will be unable to participate in the Plan if the Company is not able to process your personal data. In many countries (e.g., European Economic Area Member States, Switzerland, the United Kingdom, etc.) the country Data Protection Authority (DPA) is responsible for making sure that applicable data protection laws are followed. For more information about your privacy rights, or if you wish to file a complaint, you may contact your local DPA. A list of European Union supervisory authorities is available here: hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en; United Kingdom - Information Commissioner’s Office (ICO): hxxxx://xxx.xxx.xx; Switzerland – Federal Data Protection and Information Commissioner: Data Protection - Switzerland (axxxx.xx). In compliance with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Blueprint Medicines commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to BBB NATIONAL PROGRAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit wxx.xxxxxxxxxxx.xxx/xxx-xxxxxxxxxx for more information or to file a complaint. The services of BBB NATIONAL PROGRAMS are provided at no cost to you. If your complaint involves human resources data transferred to the United States from the European Union or Switzerland in the context of the employment relationship, and the Company does not address it satisfactorily, the Company commits to cooperate with the panel established by the EU data protection authorities (DPA Panel), and the Swiss Federal Data Protection and Information Commissioner and to comply with the advice given by the DPA panel or FDPIC with regard to such human resources data. To pursue an unresolved human resources complaint, you should contact the state or national data protection or labor authority in the appropriate jurisdiction. Contact details for the EU data protection authorities can be found at hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en. Complaints related to human resources data should not be addressed to the BBB NATIONAL PROGRAMS. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See hxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/x/article/ANNEX-I-introduction-dpf. hxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/x/article/ANNEX-I-introduction-dpf Contact Us For questions about this Privacy Notice, to exercise applicable rights related to your personal data, or for more information about the Company’s privacy and data protection practices, please contact us at the appropriate locations: EEA, Switzerland, or UK EXXxxxxxx@xxxxxxxxxxxxxxxxxx.xxx 111 United States Pxxxxxx@xxxxxxxxxxxxxxxxxx.xxx EXHIBIT B RESTRICTED NON-QUALIFIED STOCK UNIT AWARD OPTION AGREEMENT FOR NON-EMPLOYEE DIRECTORS UNDER THE BLUEPRINT MEDICINES CORPORATION 2024 STOCK INCENTIVE PLAN Country-Specific Terms and Conditions Capitalized terms used but not otherwise defined herein shall have the meaning given to such terms in the Blueprint Medicines Corporation 2024 Stock Incentive Plan as may be amended and restated and the Restricted Non-Qualified Stock Unit Award Option Agreement for Non-Employee Directors, including its Exhibit A. Terms and Conditions This Exhibit B includes additional terms and conditions that govern the Award if the Grantee provides services and/or resides in one of the countries included herein. These terms and conditions are in addition to, or, if so indicated, in place of, the terms and conditions set forth in the Restricted Stock Unit Award Agreement for Non-Employee Directors. If the Grantee is a citizen or resident (or is considered as such for local law purposes) of a country other than the one in which the Grantee is currently residing and/or providing services or if the Grantee transfers residency and/or Service Relationship to another country after the Restricted Stock Units are granted, the Administrator shall, in its discretion, determine to what extent the additional terms and conditions contained herein shall apply to the Grantee.A.

Retention of Information. Your personal data will be retained in accordance with the Company’s legitimate business needs and for purposes of compliance with legal, regulatory, audit and tax requirements for as long as allowed by applicable law. After this period, personal data will be deleted, unless the Company has a legal basis to retain it for a different purpose. Privacy Rights Depending on the laws applicable to your location (e.g., European Economic Area, Switzerland, United Kingdom, and various US state laws), you may have the right to request access to, modify, export, delete, etc. your personal data. These rights are not absolute and only apply in certain circumstances. This means that the Company may be unable or not obligated to grant your request, for example, due to legal requirements to which the Company is subject. 110 In some cases, in order to grant a request to exercise your rights, the Company may need to collect additional information from you to verify your identity, such as a government-issued identification. The Company will not discriminate against you for exercising your rights, but you will be unable to participate in the Plan if the Company is not able to process your personal data. In many countries (e.g., European Economic Area Member States, Switzerland, the United Kingdom, etc.) the country Data Protection Authority (DPA) is responsible for making sure that applicable data protection laws are followed. For more information about your privacy rights, or if you wish to file a complaint, you may contact your local DPA. A list of European Union supervisory authorities is available here: hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en; United Kingdom - Information Commissioner’s Office (ICO): hxxxx://xxx.xxx.xx; Switzerland – Federal Data Protection and Information Commissioner: Data Protection - Switzerland (axxxx.xx). In compliance with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Blueprint Medicines commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to BBB NATIONAL PROGRAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit wxx.xxxxxxxxxxx.xxx/xxx-xxxxxxxxxx for more information or to file a complaint. The services of BBB NATIONAL PROGRAMS are provided at no cost to you. If your complaint involves human resources data transferred to the United States from the European Union or Switzerland in the context of the employment relationship, and the Company does not address it satisfactorily, the Company commits to cooperate with the panel established by the EU data protection authorities (DPA Panel), and the Swiss Federal Data Protection and Information Commissioner and to comply with the advice given by the DPA panel or FDPIC with regard to such human resources data. To pursue an unresolved human resources complaint, you should contact the state or national data protection or labor authority in the appropriate jurisdiction. Contact details for the EU data protection authorities can be found at hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en. Complaints related to human resources data should not be addressed to the BBB NATIONAL PROGRAMS. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See hxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/x/article/ANNEX-I-introduction-dpf. Contact Us For questions about this Privacy Notice, to exercise applicable rights related to your personal data, or for more information about the Company’s privacy and data protection practices, please contact us at the appropriate locations: EEA, Switzerland, or UK EXXxxxxxx@xxxxxxxxxxxxxxxxxx.xxx 111 United States Pxxxxxx@xxxxxxxxxxxxxxxxxx.xxx EXHIBIT B C PERFORMANCE-BASED RESTRICTED STOCK UNIT AWARD AGREEMENT FOR NON-EMPLOYEE DIRECTORS EMPLOYEES UNDER THE BLUEPRINT MEDICINES CORPORATION 2024 STOCK INCENTIVE PLAN Country-Specific Terms and Conditions Capitalized terms used but not otherwise defined herein shall have the meaning given to such terms in the Blueprint Medicines Corporation 2024 Stock Incentive Plan as may be amended and restated and the Performance-Based Restricted Stock Unit Award Agreement for Non-Employee DirectorsEmployees, including its Exhibit A. Terms Exhibits A and Conditions This Exhibit B includes additional terms and conditions that govern the Award if the Grantee provides services and/or resides in one of the countries included herein. These terms and conditions are in addition to, or, if so indicated, in place of, the terms and conditions set forth in the Restricted Stock Unit Award Agreement for Non-Employee Directors. If the Grantee is a citizen or resident (or is considered as such for local law purposes) of a country other than the one in which the Grantee is currently residing and/or providing services or if the Grantee transfers residency and/or Service Relationship to another country after the Restricted Stock Units are granted, the Administrator shall, in its discretion, determine to what extent the additional terms and conditions contained herein shall apply to the Grantee.B.

Retention of Information. Your personal data will be retained in accordance with the Company’s legitimate business needs and for purposes of compliance with legal, regulatory, audit and tax requirements for as long as allowed by applicable law. After this period, personal data will be deleted, unless the Company has a legal basis to retain it for a different purpose. Privacy Rights Depending on the laws applicable to your location (e.g., European Economic Area, Switzerland, United Kingdom, and various US state laws), you may have the right to request access to, modify, export, delete, etc. your personal data. These rights are not absolute and only apply in certain circumstances. This means that the Company may be unable or not obligated to grant your request, for example, due to legal requirements to which the Company is subject. 110 In some cases, in order to grant a request to exercise your rights, the Company may need to collect additional information from you to verify your identity, such as a government-issued identification. The Company will not discriminate against you for exercising your rights, but you will be unable to participate in the Plan if the Company is not able to process your personal data. In many countries (e.g., European Economic Area Member States, Switzerland, the United Kingdom, etc.) the country Data Protection Authority (DPA) is responsible for making sure that applicable data protection laws are followed. For more information about your privacy rights, or if you wish to file a complaint, you may contact your local DPA. A list of European Union supervisory authorities is available here: hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en; United Kingdom - Information Commissioner’s Office (ICO): hxxxx://xxx.xxx.xx; Switzerland – Federal Data Protection and Information Commissioner: Data Protection - Switzerland (axxxx.xx). In compliance with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Blueprint Medicines commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to BBB NATIONAL PROGRAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit wxx.xxxxxxxxxxx.xxx/xxx-xxxxxxxxxx for more information or to file a complaint. The services of BBB NATIONAL PROGRAMS are provided at no cost to you. If your complaint involves human resources data transferred to the United States from the European Union or Switzerland in the context of the employment relationship, and the Company does not address it satisfactorily, the Company commits to cooperate with the panel established by the EU data protection authorities (DPA Panel), and the Swiss Federal Data Protection and Information Commissioner and to comply with the advice given by the DPA panel or FDPIC with regard to such human resources data. To pursue an unresolved human resources complaint, you should contact the state or national data protection or labor authority in the appropriate jurisdiction. Contact details for the EU data protection authorities can be found at hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en. Complaints related to human resources data should not be addressed to the BBB NATIONAL PROGRAMS. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See hxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/x/article/ANNEX-I-introduction-dpf. hxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/x/article/ANNEX-I-introduction-dpf Contact Us For questions about this Privacy Notice, to exercise applicable rights related to your personal data, or for more information about the Company’s privacy and data protection practices, please contact us at the appropriate locations: EEA, Switzerland, or UK EXXxxxxxx@xxxxxxxxxxxxxxxxxx.xxx 111 United States Pxxxxxx@xxxxxxxxxxxxxxxxxx.xxx EXHIBIT B RESTRICTED STOCK UNIT AWARD AGREEMENT FOR NON-EMPLOYEE DIRECTORS EMPLOYEES UNDER THE BLUEPRINT MEDICINES CORPORATION 2024 STOCK INCENTIVE PLAN Country-Specific Terms and Conditions Capitalized terms used but not otherwise defined herein shall have the meaning given to such terms in the Blueprint Medicines Corporation 2024 Stock Incentive Plan as may be amended and restated and the Restricted Stock Unit Award Agreement for Non-Employee DirectorsEmployees, including its Exhibit A. Terms and Conditions This Exhibit B includes additional terms and conditions that govern the Award if the Grantee provides services and/or resides in one of the countries included herein. These terms and conditions are in addition to, or, if so indicated, in place of, the terms and conditions set forth in the Restricted Stock Unit Award Agreement for Non-Employee Directors. If the Grantee is a citizen or resident (or is considered as such for local law purposes) of a country other than the one in which the Grantee is currently residing and/or providing services or if the Grantee transfers residency and/or Service Relationship to another country after the Restricted Stock Units are granted, the Administrator shall, in its discretion, determine to what extent the additional terms and conditions contained herein shall apply to the Grantee.A.

Retention of Information. Your personal data will be retained in accordance with the Company’s legitimate business needs and for purposes of compliance with legal, regulatory, audit and tax requirements for as long as allowed by applicable law. After this period, personal data will be deleted, unless the Company has a legal basis to retain it for a different purpose. Privacy Rights Depending on the laws applicable to your location (e.g., European Economic Area, Switzerland, United Kingdom, and various US state laws), you may have the right to request access to, modify, export, delete, etc. your personal data. These rights are not absolute and only apply in certain circumstances. This means that the Company may be unable or not obligated to grant your request, for example, due to legal requirements to which the Company is subject. 110 127 In some cases, in order to grant a request to exercise your rights, the Company may need to collect additional information from you to verify your identity, such as a government-issued identification. The Company will not discriminate against you for exercising your rights, but you will be unable to participate in the Plan if the Company is not able to process your personal data. In many countries (e.g., European Economic Area Member States, Switzerland, the United Kingdom, etc.) the country Data Protection Authority (DPA) is responsible for making sure that applicable data protection laws are followed. For more information about your privacy rights, or if you wish to file a complaint, you may contact your local DPA. A list of European Union supervisory authorities is available here: hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en; United Kingdom - Information Commissioner’s Office (ICO): hxxxx://xxx.xxx.xx; Switzerland – Federal Data Protection and Information Commissioner: Data Protection - Switzerland (axxxx.xx). In compliance with the EU-U.S. Data Privacy Framework and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Blueprint Medicines commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to BBB NATIONAL PROGRAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit wxx.xxxxxxxxxxx.xxx/xxx-xxxxxxxxxx for more information or to file a complaint. The services of BBB NATIONAL PROGRAMS are provided at no cost to you. If your complaint involves human resources data transferred to the United States from the European Union or Switzerland in the context of the employment relationship, and the Company does not address it satisfactorily, the Company commits to cooperate with the panel established by the EU data protection authorities (DPA Panel), and the Swiss Federal Data Protection and Information Commissioner and to comply with the advice given by the DPA panel or FDPIC with regard to such human resources data. To pursue an unresolved human resources complaint, you should contact the state or national data protection or labor authority in the appropriate jurisdiction. Contact details for the EU data protection authorities can be found at hxxxx://xxxx.xxxxxx.xx/xxxxx-edpb/board/members_en. Complaints related to human resources data should not be addressed to the BBB NATIONAL PROGRAMS. If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See hxxxx://xxx.xxxxxxxxxxxxxxxxxxxx.xxx/x/article/ANNEX-I-introduction-dpf. Contact Us For questions about this Privacy Notice, to exercise applicable rights related to your personal data, or for more information about the Company’s privacy and data protection practices, please contact us at the appropriate locations: EEA, Switzerland, or UK EXXxxxxxx@xxxxxxxxxxxxxxxxxx.xxx 111 128 United States Pxxxxxx@xxxxxxxxxxxxxxxxxx.xxx EXHIBIT B RESTRICTED STOCK UNIT AWARD AGREEMENT FOR NON-EMPLOYEE DIRECTORS UNDER THE BLUEPRINT MEDICINES CORPORATION 2024 STOCK INCENTIVE PLAN Country-Specific Terms and Conditions Capitalized terms used but not otherwise defined herein shall have the meaning given to such terms in the Blueprint Medicines Corporation 2024 Stock Incentive Plan as may be amended and restated and the Restricted Stock Unit Award Agreement for Non-Employee Directors, including its Exhibit A. Terms and Conditions This Exhibit B includes additional terms and conditions that govern the Award if the Grantee provides services and/or resides in one of the countries included herein. These terms and conditions are in addition to, or, if so indicated, in place of, the terms and conditions set forth in the Restricted Stock Unit Award Agreement for Non-Employee Directors. If the Grantee is a citizen or resident (or is considered as such for local law purposes) of a country other than the one in which the Grantee is currently residing and/or providing services or if the Grantee transfers residency and/or Service Relationship to another country after the Restricted Stock Units are granted, the Administrator shall, in its discretion, determine to what extent the additional terms and conditions contained herein shall apply to the Grantee.