Job Applicant Privacy Statement

Last updated July 2, 2026

Entrust Corporation and its subsidiaries (collectively “Entrust” or the “Company”) value and respect your privacy. This Job Applicant Privacy Statement (“Statement”) describes how we collect, use, and store personal data as a job applicant. We strongly encourage you to read this Job Applicant Privacy Statement in its entirety.

When we refer to “Personal Data” in this Statement, we mean information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, by reference to an identifier, such as a name, identification number, location data, online identifier, internet protocol (IP) address, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of a natural person.

When we refer to “Special Category Data” in this Statement, we mean a subset of Personal Data that includes information such as a Job Applicant’s race or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, healthrelated data, sexual orientation, and genetic or biometric data used to uniquely identify a person.

More detail about the types of personal data Entrust collects from job applicants (“Applicant Information”) is set forth below.

Entrust collects and processes personal data from job applicants to manage and fulfill our recruitment practices. Entrust may obtain this information directly from you through application materials (such as forms, CVs, or resumes), official identification documents (e.g., passport or driver’s license), written correspondence, as well as during interviews, meetings, or other recruitment-related assessments.

We may process the following types of personal data about you:

• Identification and Contact Details: Name, address, email address, telephone number, place of birth, date of birth, marital status, nationality, and gender;
• Professional and Educational Information: Qualifications, educational background, skills, experience, and employment history, including start and end dates with previous employers;
• Work Authorization and Other Details: Information about your entitlement to work and current level of remuneration, including benefit entitlements.

Depending on local laws, Entrust may also collect and process the following sensitive information:

• Health and Disability Information: Details about medical conditions or disabilities requiring reasonable accommodation during the recruitment process;
• Equal Opportunity Information: Equal opportunity monitoring information, including information about your ethnic origin, sexual orientation and religion or beliefs;
• Background Check Information: Information about your financial credit history and criminal record;
• Additional Specific Requirements: For specific roles in the United States, you may be required to undergo drug screening and fingerprinting.

Entrust may also obtain information about you from third parties, such as former employers or background check providers, in accordance with applicable local laws. These checks are typically conducted only after a job offer has been made. Before performing any checks, Entrust will generally inform you, seek your consent, and explain what information will be collected, from whom, and how it will be used. In limited circumstances, prior notice may not be possible, such as when providing notice could constitute an offense or compromise the rights of others.

Where required by law, Entrust processes Applicant Information only when a lawful basis exists.

Entrust may share Applicant Information in limited circumstances:

• Within Entrust: Information may be shared internally with affiliates such as Human Resources, Talent Acquisition, hiring managers, and IT staff when access is necessary for their roles. These Entrust affiliates are permitted to use Applicant Information consistent with this Job Applicant Privacy Statement.
• Third Party-Service Providers: If your application is successful and an offer is extended, Entrust may share Applicant Information with trusted vendors and consultants who perform services on our behalf, such as background checks, criminal record checks, and financial credit checks. These providers act under Entrust’s instructions and contractual safeguards.
• Former Employers: After an offer of employment is accepted, Entrust may contact former employers to verify employment history and obtain references.

If your application for employment is unsuccessful, Entrust may retain your Applicant Information after the recruitment process concludes to maintain a talent database for future opportunities. You may withdraw your consent at any time, and upon withdrawal, your Applicant Information will be deleted.

For applicants located in the European Economic Area (EEA), Entrust will retain your Applicant Information for 24 months after the conclusion of the recruitment process to maintain a talent database for future opportunities. At the end of the applicable period, or once you withdraw your consent, your Applicant Information will be deleted.

If your application for employment is successful, Applicant Information collected during the recruitment process will be transferred to your personnel file and retained in accordance with Entrust’s Employee Privacy Statement.

Entrust is an ISO 27001 and 27701 certified organization and uses appropriate technical, organizational, and administrative security measures to protect your Applicant Information from loss, misuse, unauthorized access, disclosure, alteration, and destruction.

Additionally, Entrust maintains Data Processing Agreements (DPAs) with all third-party vendors that handle personal data on our behalf. These measures are designed to provide a level of protection appropriate to the nature and risk of processing your Applicant Information.

Applicant Information may be stored or processed on servers located outside the country where it was originally collected. This includes Entrust’s own servers as well as those operated by trusted third-party providers. In certain instances, staff working for Entrust or our suppliers may access Applicant Information from locations different from where the data was collected.

Entrust only transfers Applicant Information as permitted by law. Where required, Entrust implements appropriate safeguards to protect your data during international transfers. This includes the use of Standard Contractual Clauses (SCCs) recommended by relevant data protection authorities for all cross-border transfers, both within Entrust and to thirdparty vendors, to ensure an adequate level of data protection.

Currently, Entrust digitally stored application data on Workday, a secure third-party platform with servers located in the United States.

Entrust Corporation is the entity acting as the data controller of your Applicant Information.

Depending on the applicable data protection laws in your country of residence, you may have certain rights regarding your Applicant Information. These rights include:

• Access and Portability: The right to request details about the Applicant Information we hold and to obtain a copy in a structured, machine-readable format.
• Correction and Deletion: The right to request that we correct inaccurate information or to delete your Applicant Information, subject to legal and legitimate business interests.
• Restriction and Objection: The right to restrict processing or object to certain types of processing, such as where processing is based on legitimate interests and not required by law or contract.
• Withdrawal of Consent: If Entrust has collected and processed your Applicant Information based on your consent, you may withdraw your consent at any time by contacting [email protected]. Withdrawing your consent will not affect prior lawful processing or processing based on other legal grounds.

Please note that these rights may be limited in certain circumstances. For example, where fulfilling your request would compromise another individual’s privacy or where we are legally required to retain specific information. We may also request additional details to verify your identity and clarify your request, but you will never be required to create an account to exercise your rights.

You are not legally or contractually required to provide Applicant Information to Entrust during the recruitment process. However, if you choose not to provide certain details, we may be unable to process your application or consider you for employment.

We may update this Job Applicant Privacy Statement from time to time to reflect changes in our processing practices, applicable laws, or operational requirements.

Where we make material changes to this Statement, we will take reasonable steps to inform affected individuals, which may include providing notice through email or other appropriate means.

The updated Statement will be made available at https://www.entrust.com/legalcompliance/data-privacy and the “last updated” date will indicate when the changes became effective.

This Job Applicant Privacy Statement is not intended to replace other notices provided by Entrust in accordance with national and local laws and regulations. In the event of any conflict between this Statement and other notices required by local law, the notices required by local law will prevail. This Job Applicant Privacy Statement applies to the processing of Applicant Information by or on behalf of Entrust globally.

If you have questions or concerns about this Job Applicant Privacy Statement or our handling of your Applicant Information, please contact us at [email protected] or:

Entrust Corporation
Attention: Director, Privacy
1187 Park Place
Shakopee, MN 55379

To exercise your data subject rights, please submit a request through our online form here. We will review your request promptly and make every effort to address your questions and concerns.

If you are still not satisfied, you may lodge a complaint with your national data protection supervisory authority. You can find more information from the following authorities:

• European Data Protection Authorities
• UK Information Commissioner's Office (ICO)
• Office of the Privacy Commissioner of Canada
• Cyberspace Administration of China (CAC)

To download a copy of this Privacy Statement in English please click here.
To download a copy of this Privacy Statement in French please click here.
To download a copy of this Privacy Statement in German please click here.
To download a copy of this Privacy Statement in Spanish please click here.
To download a copy of this Privacy Statement in Chinese please click here.