Common use of Xxxxx-Xxxxx-Xxxxxx Privacy Requirements Clause in Contracts

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will shall not transfer information to a third party, except as provided in this Agreement and as permitted by applicable provisions of Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from shall take reasonable measures to ensure that any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”. [page break] Xxxxx-Xxxxx-Xxxxxx Privacy Amendment IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx, FSA, MAAA Xxxxxx X. Xxxxx, XX Second Vice President & Actuary Second Vice President & Actuary Date: 6/27/02 Date: 6/27/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President & Actuary Second Vice President & Actuary Date: 7/2/02 Date: 7/2/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President & Actuary Second Vice President & Actuary Date: 7/2/02 Date: 7/2/02 GENERAL & COLOGNE LIFE RE OF AMERICA By: /s/ Xxxxxxx X. Xxxx Witness: /s/ Xxxxxx Xxxxxx Title: Secretary Title: Assistant Secretary Date: 6/3/02 Date: 6/3/02 General & Cologne Life Re AMENDMENT TO TREATY # , DATED September 1, 1998 (MM ref# ) CEDING COMPANY: C.M. LIFE INSURANCE COMPANY of Hartford, Connecticut and MASSACHUSETTS MUTUAL LIFE INSURANCE co. of Springfield, Massachusetts REINSURANCE COMPANY: GENERAL & COLOGNE LIFE RE OF AMERICA 000 Xxxx Xxxxxx Xxxxxxxx, XX 00000 ACCOUNT NUMBER: EFFECTIVE DATE: September 1, 1998 AMENDMENT NUMBER: TYPE OF BUSINESS: Automatic YRT AMENDMENT PROVISIONS: Effective September 1, 1998, the Jumbo Limit, Issue Limit and the Maximum Binding Limit are hereby amended. Therefore, Schedule B is hereby replaced by the attached Schedule B -amended (effective September 1, 1998).

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and or as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreementlaw. The Reinsurer will obtain agreements from any such third party reinsurers parties or Reinsurers receiving non-public personal information that require requires the third party reinsurers to use of reasonable care to maintain the confidentiality of the “non-public personal information”.. “Non-public personal information” does not include de-identified personal data, i.e., information that does not identify, or could not reasonably be associated with, an individual. Reinsurer agrees to restrict access to non-public personal information to those employees who need to know that information and represents that it has appropriate measures to establish a security program with respect to non-public personal information which: (i) ensures the security and confidentiality of non-public personal information, (ii) protects against any anticipated threats or hazards to the security or integrity of non-public personal information, and (iii) protects against any unauthorized access to or use of such information including access or use that could result in substantial harm or inconvenience to any of Ceding Company’s consumers or customers. Notwithstanding anything contained herein to the contrary, Reinsurer will immediately notify Ceding Company of any circumstances involving (i) a “Breach of Security” of non-public personal information or (ii) a reasonable belief by Reinsurer that there may be a breach of security of non-public personal information (the “Notification”). In addition to the Notification, no later than three (3) business days after detection (or later if legally acceptable but in no case more than 5 days) of the Breach of Security, Reinsurer will also provide Ceding Company with a report (the “Report”) summarizing the Breach of Security, which will include, at a minimum, the following: date, time, description, how the Breach of Security was detected, systems and/or data (including non-public personal information) subject to unauthorized access, root cause, corrective action taken to date and any additional planned actions. Reinsurer will indemnify Ceding Company for any losses as a result of the breach. For purposes of this Agreement,

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are is a “financial institutionsinstitution” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties Ceding Company and Reinsurer may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities, or to the Ceding Company’s or Reinsurer’s affiliates in order to fulfill the terms of this Agreement. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers (as long as the third party is willing to release such document) that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are is a “financial institutionsinstitution” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties Ceding Company and Reinsurer may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will shall not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities, or to the Ceding Company’s or Reinsurer’s affiliates in order to fulfill the terms of this Agreement. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will shall obtain agreements from any such third party reinsurers (as long as the third party is willing to release such document) that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.. [page break] IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/10/02 Date: 6/10/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/10/02 Date: 6/10/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/10/02 Date: 6/10/02 ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA By: /s/ X. X. Xxxxxx Witness: /s/ Xxxxxxx Xxxxx Title: Sr VP Title: Sr VP & Secretary Date: 5/8/02 Date: 5/15/02 AMENDMENT to ALL REINSURANCE AGREEMENTS between MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY, MML BAY STATE LIFE INSURANCE COMPANY, and C.M. LIFE INSURANCE COMPANY (the “Ceding Company” sometimes known as the “Reinsured”) and ALLIANZ LIFE INSURANCE COMPANY OF NORTH AMERICA (the “Reinsurer”) As of effective date of the Agreement, the Ceding Company (including “any” or “all” of the three (3) entities listed above) and the Reinsurer agree to amend the above-referenced Agreement(s) to include the following important language:

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are is a “financial institutionsinstitution” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties Ceding Company and Reinsurer may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities, or to the Ceding Company’s or Reinsurer’s affiliates in order to fulfill the terms of this Agreement. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers (as long as the third party is willing to release such document) that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”. [page break] Xxxxx-Xxxxx-Xxxxxx Privacy Amendment IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/19/02 Date: 7/19/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/19/02 Date: 7/19/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/19/02 Date: 7/19/02 SECURITY LIFE OF DENVER INSURANCE COMPANY By: /s/ Xxxxxxx X. Xxxxxxxxxxxx Witness: /s/ Xxxxx Xxxxx Title: Executive Director & Senior Actuary Title: VP of Business Operations Date: July 3, 2002 Date: 7/10/02 ING Re UNITED STATES OF AMERICA Xxxxxx X. Xxxxxxxx Head of Contracts & Chief Compliance Officer November 20, 2003 Xx. Xxxxx Xxxxx, EA, FSA, MAAA Second Vice President & Actuary Massachusetts Mutual Life Insurance Company 0000 Xxxxx Xxxxxx Xxxxxxxxxxx, XX 00000-000 Re: Compliance with Applicable Law and Regulations Dear Xx. Xxxxxx: As you are aware, there are a number of laws and regulations applicable to the business you issue and we reinsure. For example, the U.S. Treasury Department’s Office of Foreign Assets Control (“OFAC”) administers and enforces economic sanctions against countries, entities and groups of individuals, such as terrorists and narcotics traffickers that may threaten the security of our country. These sanctions allow for the blocking of assets and install trade restrictions to accomplish foreign policy and national security goals. Additionally, U.S. persons, including institutions, are restricted from transacting business and distributing assets to individuals and companies reflected on a list as published periodically by OFAC. Collectively, such individuals and companies are called “Specially Designated Nationals and Blocked Persons” or “SDNs.” Any property in which an SDN has an interest (such as a life insurance policy) shall be blocked. Our reinsurance agreements are affected as OFAC takes the position that (a) reinsurance of a risk that cannot be insured under OFAC regulations is also a violation of OFAC regulations, since it represents “indirect” participation in a transaction that is prohibited; and (b) reinsurance treaties should exclude such a risk. In addition, a reinsurer is directly prohibited from participating in a transaction that would, on its own, violate any OFAC regulations. 000 Xxxxxxxx Xxxxx Xxxxxxx • FI. Xxxxx, Xxxxxxx 00000 Telephone • Cell Fax • E-mail Security Life of Denver Insurance Company [page break] While we have installed processes designed to comply with US. laws and regulations, we rely on your company to comply with OFAC sanctions laws and serve as the first line defense against OFAC violations. In view of OFAC’s position, we believe we are not permitted to do business with any companies on the SDN list or with ties to prohibited countries, nor are we permitted to reinsure a risk on the SDN list or with ties to a prohibited country or provide payment of a death benefit that would provide a monetary benefit to a SDN or a prohibited country, including its citizens. We also believe that ceding companies insuring non-US. lives present a slightly higher risk since the non-U.S. lives may be more prone to appear on the SDN list or be associated with a prohibited country. If our reinsurance agreements with you include coverage for non-U.S. lives, we have the following expectations to assist with our compliance with US. law: • A policy shall . • The ceding company shall . • A reinsured death claim shall . We suggest you file a copy of this letter with each of your reinsurance agreements with us. Future agreements will include specific language to assure we are making best efforts to be in compliance with applicable laws and regulations. If you have questions with respect to OFAC or other related matters, please do not hesitate to contact at . Sincerely, /s/ X X Xxxxxxxx Xxxxxx X. Xxxxxxxx Head of Contracts & Chief Compliance Officer 000 Xxxxxxxx Xxxxx Xxxxxxx • Ft. Xxxxx. Indiana 46814 Telephone • Cell Fax • E-mail Security Life of Denver Insurance Company AMENDMENT to the AUTOMATIC YRT AGREEMENT between MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY, C.M. LIFE INSURANCE COMPANY, and MML BAY STATE LIFE INSURANCE COMPANY (hereinafter referred to as the “Ceding Company”) and SECURITY LIFE OF DENVER INSURANCE COMPANY (hereinafter referred to as the “Reinsurer”) Original Treaty Effective Date: September 1, 1998 Coverage: VARIABLE UNIVERSAL LIFE Effective March 1, 2004, the Amendment effective date, the applicable sections of Schedule B - Reinsurance Limits of the above-referenced Agreement will be replaced with the following:

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting partyParty’s then current privacy policy and practices, in order to allow the other party Party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will shall not transfer information to a third party, except as provided in this Agreement and as permitted by applicable provisions of Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from shall take reasonable measures to ensure that any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are is a “financial institutionsinstitution” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx ActAct and is subject to various laws and regulations governing the privacy and security of nonpublic individually identifiable information (“Personal Information”) and the Reinsurer acknowledges the need to maintain the privacy and confidentiality of such Personal Information. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” Personal Information and such information may be transmitted by either the Ceding Company or Reinsurer to the other via secure transmission in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care care, consistent with applicable legal and regulatory requirements, to maintain the confidentiality security, confidentiality, and integrity of the “non-public personal information” Personal Information and shall not make any use of the “non-public personal information” Personal Information beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information Personal Information to a any third party, except as provided in this Agreement and or as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if or required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreementlaw. The Reinsurer will obtain agreements from any such third party reinsurers parties or Reinsurers receiving Personal Information that require requires the third party reinsurers to use of reasonable care care, consistent with applicable legal and regulatory requirements, to maintain the security, confidentiality and integrity Personal Information. Reinsurer agrees to restrict access to Personal Information to those employees who need to know that information and represents that it has appropriate measures to establish a security program with respect to Personal Information which: (i) ensures the security and confidentiality of Personal information, (ii) protects against any anticipated threats or hazards to the security or integrity of Personal Information, and (iii) protects against any unauthorized access to or use of Personal Information including access or use that could result in substantial harm or inconvenience to any of Ceding Company’s consumers or customers. Notwithstanding anything contained herein to the contrary, Reinsurer will immediately notify Ceding Company of any circumstances involving (i) a “Breach of Security” of Personal Information or (ii) a reasonable belief by Reinsurer that there may be a Breach of Security of Personal Information (the “non-public personal informationNotification”.). In addition to the Notification, no later than business days after detection of the Breach of Security, Reinsurer will also provide Ceding Company with a report (the “Report”) summarizing the Breach of Security, which will include, at a minimum, the following: date, time, description, how the Breach of Security was detected, systems and/or data (including [page break] Automatic and Facultative YRT Reinsurance Agreement

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”. [page break] IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/27/02 Date: 6/27/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/2/02 Date: 7/2/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/2/02 Date: 7/2/02 RGA REINSURANCE COMPANY By: /s/ X. Xxxxxxx Witness: N/A Title: Sales VP Title: Date: 6/10/02 Date: AMENDMENT to the AUTOMATIC YRT AGREEMENT between MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY, MML BAY STATE LIFE INSURANCE COMPANY, and C.M. LIFE INSURANCE COMPANY (hereinafter the “Ceding Company”) and RGA REINSURANCE COMPANY (hereinafter the “Reinsurer”) Original Treaty Effective Date: September 1, 1998 Coverage: Variable Universal Life This Amendment hereby terminates the reinsurance of new business on new lives on and after February 29, 2004, the Amendment effective date, under the above-referenced Agreement. All other changes allowed under the Agreement, including but not limited to any increases if they are normally applied to the existing contract/pool, shall continue to be available hereunder. All business inforce at that effective date shall remain reinsured hereunder until the termination, expiry, or of the underlying policy on which the reinsurance is based. All terms and conditions of this Agreement not in conflict with the terms and conditions of this Amendment shall continue unchanged.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers vendors for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers vendors that require the third party reinsurers vendors to use reasonable care to maintain the confidentiality of the “non-public personal information”. [page break] Xxxxx-Xxxxx-Xxxxxx Privacy Amendment IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/15/02 Date: 7/15/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/11/02 Date: 7/11/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/11/02 Date: 7/11/02 MUNICH AMERICAN REASSURANCE COMPANY By: /s/ Xxx Xxxx-Xxxxx Witness: /s/ W. Xxxxxx Xxxxxx Title: 2nd VP Title: Asst VP Date: 7/1/02 Date: 7/8/02 AMENDMENT to the AUTOMATIC YRT AGREEMENT between MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY, MML BAY STATE LIFE INSURANCE COMPANY, and C.M. LIFE INSURANCE COMPANY (hereinafter the “Ceding Company”) and MUNICH AMERICAN REASSURANCE COMPANY (hereinafter the “Reinsurer”) Coverage: Variable Life Select Inforce / First Dollar Quota Share Effective: February 8, 1999 Effective February 8, 1999, the Amendment effective date, the applicable section of Schedule A: Accepted Coverages of the above-referenced Agreement shall be replaced in its entirety with the following: Eligibility: . The Reinsured may elect to reinsure . In these cases, will not be eligible for reinsurance under this agreement. All terms and conditions of this Agreement not in conflict with the terms and conditions of this Amendment shall continue unchanged.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and the Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties Ceding Company and Reinsurer may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will shall not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities, or to the Ceding Company’s or Reinsurer’s affiliates in order to fulfill the terms of this Agreement. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will shall obtain agreements from any such third party reinsurers (as long as the third party is willing to release such document) that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx ActAct and are subject to various laws and regulations governing the privacy and security of nonpublic individually identifiable information (“Personal Information”). The Parties may, from time to time, come into possession of “non-public personal informationPersonal Information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” and such information may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care care, consistent with applicable legal and regulatory requirements, to maintain the confidentiality security, confidentiality, and integrity of the “non-public personal informationPersonal Information” and shall not make any use of the “non-public personal information” Personal Information beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information Personal Information to a any third party, except as provided in this Agreement and or as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if or required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreementlaw. The Reinsurer will obtain agreements from any such third party reinsurers parties or Reinsurers receiving Personal Information that require requires the third party reinsurers to use of reasonable care care, consistent with applicable legal and regulatory requirements, to maintain the security, confidentiality of the “non-public personal information”.and integrity Personal Information. [page break]

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers vendors for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers vendors that require the third party reinsurers vendors to use reasonable care to maintain the confidentiality of the “non-public personal information”. [page break] Xxxxx-Xxxxx-Xxxxxx Privacy Amendment IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/15/02 Date: 7/15/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/11/02 Date: 7/11/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/11/02 Date: 7/11/02 MUNICH AMERICAN REASSURANCE COMPANY By: /s/ Xxx Xxxx-Xxxxx Witness: /s/ W. Xxxxxx Xxxxxx Title: 2nd VP Title: Asst VP Date: 7/1/02 Date: 7/8/02 AMENDMENT to the AUTOMATIC YRT AGREEMENT between MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY, MML BAY STATE LIFE INSURANCE COMPANY, and C.M. LIFE INSURANCE COMPANY (hereinafter the “Ceding Company”) and MUNICH AMERICAN REASSURANCE COMPANY (hereinafter the “Reinsurer”) Coverage: Variable Life Plus Inforce / First Dollar Quota Share Effective: January 1, 1999 Effective January 1, 1999, the Amendment effective date, the applicable section of Schedule A: Accepted Coverages of the above-referenced Agreement shall be replaced in its entirety with the following: Eligibility: . The Reinsured may elect to reinsure . In these cases, will not be eligible for reinsurance under this agreement. All terms and conditions of this Agreement not in conflict with the terms and conditions of this Amendment shall continue unchanged.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.. [page break] IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/10/02 Date: 6/10/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/10/02 Date: 6/10/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/10/02 Date: 6/10/02 AMERICAN UNITED LIFE INSURANCE COMPANY By: /s/ Xxxxxxx X. Xxxxxxx Witness: /s/ Xxxx X. Xxxxxx Title: VP Life Reins Title: Asst VP Reins Admin Date: 5/20/02 Date: 5/20/02 AMENDMENT to the AUTOMATIC YRT REINSURANCE AGREEMENT DATED FEBRUARY 8, 1999 between MML BAY STATE LIFE INSURANCE COMPANY Hartford, Connecticut (Ceding Company) and AMERICAN UNITED LIFE INSURANCE COMPANY Indianapolis, Indiana

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will shall not transfer information to a third party, except as provided in this Agreement and as permitted by applicable provisions of Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from shall take reasonable measures to ensure that any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.. [page break]

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers vendors for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers vendors that require the third party reinsurers vendors to use reasonable care to maintain the confidentiality of the “non-public personal information”.. [page break] Xxxxx-Xxxxx-Xxxxxx Privacy Amendment IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/15/02 Date: 7/15/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/11/02 Date: 7/11/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 7/11/02 Date: 7/11/02 MUNICH AMERICAN REASSURANCE COMPANY By: /s/ Xxx Xxxx-Xxxxx Witness: /s/ W. Xxxxxx Xxxxxx Title: 2nd VP Title: Asst VP Date: 7/1/02 Date: 7/8/02 AMENDMENT to all Reinsurance Agreements between MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY, MML BAY STATE LIFE INSURANCE COMPANY, or CM LIFE INSURANCE COMPANY hereinafter referred to as the Reinsured(s) and MUNICH AMERICAN REINSURANCE COMPANY hereinafter referred to as the Reinsurer The Reinsureds and the Reinsurer, as parties to the above referenced reinsurance agreements, hereby agree to amend them as of January 1, 1999 as follows: If a new Reinsured issues a policy that is considered to be a continuation of the original insurance from a policy originally issued by another of the above three Reinsureds under the terms of a reinsurance agreement with the Reinsurer, then the new Reinsured will also be considered to be a party to that reinsurance agreement for purposes of the continuation of the original insurance clause. All terms and conditions of these Reinsurance Agreements not in conflict with the terms and conditions of this Amendment will continue unchanged. [page break]

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”.. [page break] Xxxxx-Xxxxx-Xxxxxx Privacy Amendment IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/10/02 Date: 6/10/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/10/02 Date: 6/10/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President and Actuary Second Vice President & Actuary Date: 6/10/02 Date: 6/10/02 AMERICAN UNITED LIFE INSURANCE COMPANY By: /s/ Xxxxxxx X. Xxxxxxx Witness: /s/ Xxxx X. Xxxxxx Title: VP Life Reins Title: Asst VP Reins Admin Date: 5/20/02 Date: 5/20/02 AMENDMENT to all Reinsurance Agreements between MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY, MML BAY STATE LIFE INSURANCE COMPANY, or C.M. LIFE INSURANCE COMPANY hereinafter referred to as the Reinsured(s) and AMERICAN UNITED LIFE INSURANCE COMPANY hereinafter referred to as the Reinsurer The Reinsureds and the Reinsurer, as parties to the above referenced reinsurance agreements, hereby agree to amend them as of January 1, 1999 as follows: If a new Reinsured issues a policy that is considered to be a continuation of the original insurance from a policy originally issued by another of the above three Reinsureds under the terms of a reinsurance agreement with the Reinsurer, then the new Reinsured will also be considered to be a party to that reinsurance agreement for purposes of the continuation of the original insurance clause. All terms and conditions of these Reinsurance Agreements not in conflict with the terms and conditions of this Amendment will continue unchanged. [page break]

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and or as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreementlaw. The Reinsurer will obtain agreements from any such third party reinsurers parties or Reinsurers receiving non-public personal information that require requires the third party reinsurers to use of reasonable care to maintain the confidentiality of the “non-public personal information”.. “Non-public personal information” does not include de-identified personal data, i.e., information that does not identify, or could not reasonably be associated with, an individual. Reinsurer agrees to restrict access to personal information to those employees who need to know that information and represents that it has appropriate measures to establish a security program with respect to personal information which: (i) ensures the security and confidentiality of personal information, (ii) protects against any anticipated threats or hazards to the security or integrity of personal information, and (iii) protects against any unauthorized access to or use of such information including access or use that could result in substantial harm or inconvenience to any of Ceding Company’s consumers or customers. Notwithstanding anything contained herein to the contrary, Reinsurer will immediately notify Ceding Company of any circumstances involving (i) a “Breach of Security” of personal information or (ii) a reasonable belief by Reinsurer that there may be a breach of security of personal information (the “Notification”). In addition to the Notification, no later than three (3) calendar days after detection (or later if legally acceptable but in no case more than 5 days) of the Breach of Security, Reinsurer will also provide Ceding Company with a report (the “Report”) summarizing the Breach of Security, which will include, at a minimum, the following: date, time, description, how the Breach of Security was detected, systems and/or data (including personal information) subject to unauthorized access, root cause, corrective action taken to date and any additional planned actions. Reinsurer will indemnify Cedin Company for any losses as a result of the breach. For purposes of this Agreement, “Breach of Security” means any

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers vendors for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers vendors that require the third party reinsurers vendors to use reasonable care to maintain the confidentiality of the “non-public personal information”.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Each of the Ceding Company and the Reinsurer are (individually, a “Party” and collectively, the “Parties”) is a “financial institutionsinstitution” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx ActAct (“GLB”). The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx ActGLB (“Information”). The “non-public personal information” Information may be transmitted by either the Ceding Company or Reinsurer one Party to the other in accordance with the transmitting partyParty’s then then-current privacy policy and practices, in order to allow the other party Party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer each Party shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” Information and shall not make any use of the “non-public personal information” Information beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer Parties agree that they will not transfer information Information to a third party, except as provided in this Agreement and or as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx ActGLB, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” Information to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”Information, make no use of the Information beyond the purpose for which it was disclosed, and not disclose the Information except as permitted pursuant to an agreement similar to this Agreement.

Xxxxx-Xxxxx-Xxxxxx Privacy Requirements. The Ceding Company and Reinsurer are “financial institutions” as that term is used in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The Parties may, from time to time, come into possession of “non-public personal information” as defined in Title V of the Xxxxx-Xxxxx-Xxxxxx Act. The “non-public personal information” may be transmitted by either the Ceding Company or Reinsurer to the other in accordance with the transmitting party’s then current privacy policy and practices, in order to allow the other party to perform pursuant to this Agreement. During the continuation of this Agreement and after its termination, the Ceding Company or Reinsurer shall at all times use reasonable care to maintain the confidentiality of the “non-public personal information” and shall not make any use of the “non-public personal information” beyond the purpose for which it was disclosed. The Ceding Company and Reinsurer agree that they will not transfer information to a third party, except as provided in this Agreement and as permitted by Title V of the Xxxxx-Xxxxx-Xxxxxx Act, such permission including, but not limited to, disclosure of Information if required by applicable federal, state or local legal requirement, order of a court of competent jurisdiction, properly authorized civil, criminal or regulatory investigation, or subpoena by federal, state or local authorities. The Ceding Company and Reinsurer agree that the Reinsurer may need to transfer “non-public personal information” to third party reinsurers for the purpose of obtaining reinsurance on risks subject to this Agreement. The Reinsurer will obtain agreements from any such third party reinsurers that require the third party reinsurers to use reasonable care to maintain the confidentiality of the “non-public personal information”. [page break] IN WITNESS WHEREOF, the parties hereto execute this Amendment in good faith: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx X. Xxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xxxxx X. Xxxxxx, FSA, MAAA Xxxxxx X. Xxxxx, XX Second Vice President & Actuary Second Vice President & Actuary Date: 6/27/02 Date: 6/27/02 MML BAY STATE LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President & Actuary Second Vice President & Actuary Date: 7/2/02 Date: 7/2/02 C.M. LIFE INSURANCE COMPANY By: /s/ Xx Xxxxxxxx Witness: /s/ Xxxxxx X. Xxxxx XX Xx Xxxxxxxx Xxxxxx X. Xxxxx, XX Second Vice President & Actuary Second Vice President & Actuary Date: 7/2/02 Date: 7/2/02 GENERAL & COLOGNE LIFE RE OF AMERICA By: /s/ Xxxxxxx X. Xxxx Witness: /s/ Xxxxxx Xxxxxx Title: Secretary Title: Assistant Secretary Date: 6/3/02 Date: 6/3/02 AMENDMENT to the AUTOMATIC YRT AGREEMENT between MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY, C.M. LIFE INSURANCE COMPANY, And MML BAY STATE LIFE INSURANCE COMPANY (hereinafter the “Ceding Company”, sometimes known as the “Reinsured”) and GENERAL & COLOGNE LIFE RE OF AMERICA (the “Reinsurer”) EFFECTIVE: FEBRUARY 8, 1999 Coverage: VARIABLE LIFE SELECT INFORCE/FIRST DOLLAR QUOTA SHARE On or after February 8, 1999, the treaty and Amendment effective date, the following language is hereby omitted from of the above-referenced agreement: “The insured .” All terms and conditions of this Agreement not in conflict with the terms and conditions of this Amendment will continue unchanged. In witness whereof, this Agreement is hereby executed in good faith by both parties in duplicate: MASSACHUSETTS MUTUAL LIFE INSURANCE COMPANY By: /s/ Xxxxx Xxxxxx Date: 12/29/04 Xxxxx Xxxxxx Second Vice President and Actuary [page break]