Brandon Swinford

∙ Lead Crypto.com’s expansion into the US ∙ Advised marketing and growth teams on legal and privacy issues and presented solutions in the launch of global and local marketing campaigns, sweepstakes, product giveaways, NFT drops, events, and sponsorships ∙ Ensured privacy by design in all new and old products while taking into consideration US and Canadian privacy and financial laws and regulations ∙ Advised on all aspects of US and Canadian privacy laws and regulations affecting Crypto.com’s operations, including, but not limited to, GLBA, Regulation P, The Right to Financial Privacy Act, CCPA/CPRA, and other state-specific privacy and financial laws, PIPEDA, biometric data collection laws, consumer protection, AdTech/MarTech, and law enforcement request for information, KYC laws, etc. ∙ Managed vendor relationships from a privacy perspective ∙ Drafted, localized, and revamped privacy policies and procedures, including, vendor risk assessments, law enforcement reviews, US privacy notice, US privacy policy, Canadian privacy notice, US NFT privacy policy, employee privacy policy, PIMS, data processing agreements, standard contractual clauses, etc. ∙ Aligned with internal audit team to ensure Crypto.com is audit-ready from a privacy perspective ∙ Analyzed and performed privacy impact assessments and gap analysis on Crypto.com’s privacy program, newly acquired company, and corporate subsidiaries ∙ Managed and advised a team of US privacy professionals

∙ Research, prepare, and conduct presentations to key executives on data and security compliance risks for entire company ∙ Advice executive leadership on ways to mitigate potential privacy or security risks for international launch of new products ∙ Cross-collaborate with front and back-end developers to ensure website and applications are compliant with CCPA and GDPR, including, but not limited to, cookies management, Facebook tracking pixels, Facebook LDU for UK/EU, Google Analytics, and enhanced Google Ads Conversions ∙ Re-architect privacy notifications on website, applications, and legal documents to ensure they align with applicable laws ∙ Draft and maintain internal privacy and security policies and procedures, including, but not limited to, BYOD policy, data security incident response plan, global marketing content checklist, data destruction policy, data retention policy, CCPA and GDPR deidentification policy, data subject requests (DSR) policy, security risk assessment, information security policy, and written information security program ∙ Drafts and implements external privacy and security, including, CCPA and GDPR vendor assessments, data processing addendums, terms of service, privacy policy, cookie policy, consumer breach response emails and letters, GDPR Article 30 Report, and data privacy impact assessments (DPIA) ∙ Fullfill consumer DSR requests, including, requests for deletion, access, transfer, and correct according to applicable laws ∙ Conduct comprehensive data discovery for the entire company

∙ Develop comprehensive data privacy programs for multinational corporations ∙ Draft and update vendor contracts, privacy notices, and verifiable consumer request templates to ensure compliance ∙ Analyze complex legal issues for both GDPR, CCPA, and other applicable global privacy laws ∙ Draft and update vendor contracts, privacy notices, and verifiable consumer request templates to ensure compliance ∙ Conduct data mapping, cookie consent solutions, and incident management tools using OneTrust software ∙ Collaborate with cross-functional teams across organizations to ensure privacy by design and compliance with global privacy laws

• Prepared presentation on 2018 tax code changes on behalf of the Judicial Council of California • Presented abridged tax code to over 160 lawyers and judges at the 22nd Annual AB 1059 Child Support Training Conference • Researched and analyzed 199(a) of the Tax Cuts and Jobs Act of 2017

• Research and develop litigation strategy for international labor and employment matters • Coordinate with HR to keep Masimo apprised on latest developments in domestic labor and employment laws in all 50 states • Strategize and draft employee termination letters, settlement agreements, and responses to employee complaints • Streamline companywide merger and acquisition (M&A) process, including developing an internal M&A strategy checklist • Assist with post-merger integration of newly acquired company, evaluating all contracts, identifying all material ongoing obligations and privacy concerns pertinent to Masimo, and advising Assistant General Counsel on such obligations • Analyze and negotiate commercial contracts, including, but not limited to, equipment lease agreements, license agreements, amendments, consulting agreements, and settlement agreements • Researched international privacy and security regulations, including GDPR, CCPA, and potential Brexit issues, developed an internal matrix to track Masimo’s global compliance, and update global privacy policies based on such research