California Consumer Privacy Act

Employee and Job Applicant Privacy Notice for California Residents

The Federal Home Loan Bank of Des Moines (collectively, “FHLB/DM,” “we,” or “us”) understands the importance of privacy to our job applicants, employees, and contractors. We take our responsibility to protect your information seriously. Pursuant to the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act (CPRA), this privacy notice (the “Notice”) provides information regarding the categories of information we collect from job applicants, employees, and contractors who reside in California and the purposes for our collection of those categories of information.

Your Rights

In order to exercise any of your rights below, contact humanresources@fhlbdm.com.

• Right to Access: You have the right to access categories of personal information and specific pieces of personal information. This includes any guesswork drawn from personal information to create a profile reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. If the personal information has been shared with third parties by us, we will notify them of the request to delete/amend as well.
• Right to Correct: You have the right to correct your personal information using commercially reasonable efforts and we must make those corrections upon request.
• Right to Delete: You have the right to delete your personal information when requested--However, numerous statutory exemptions may apply, including allowing us to retain personal information reasonably anticipated by you within the context of an ongoing relationship with us, to perform a contract between us as employee and employer, or to comply with a legal obligation. In other words, we are allowed to keep certain information if we need it to form a contract with you and/or are required to retain that information by law. In order to exercise this right, click here.
• Right to Restrict Uses of Sensitive Personal Information: Sensitive Personal Information includes a social security number, account log in, financial information, geolocation, racial or ethnic origin, religious beliefs, sexual orientation, health information, biometrics, and the contents of employee communications unless the employer is the intended recipient of the communication. Starting in January 2023, you may be able to direct us to limit certain uses of sensitive personal information for specific business purposes, as well as to direct us to limit disclosure of sensitive personal information, absent a qualifying exemption.
• Right to Opt Out: You have the right to opt out of the sale of personal information to third parties. The term “sale” is a broad term, and includes disclosing employee information to business partners, vendors, and contractors absent a written agreement containing specific terms restricting the third party’s use of that data, or a qualifying exemption.

Categories of Personal Information We Collect

As defined by the CCPA, “personal information” includes any information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or device. It does not include publicly-available information from government records or information that has been de-identified or aggregated.

In the past 12 months, we have collected the following categories of personal information from California residents through our websites and from job applicants.

Category	Examples	Do We Collect?
Legally protected classification characteristics	Race, color, national origin, citizenship, religion, marital status, sex, sexual orientation, age (40 years or older), gender, military status, genetic information, medical condition, pregnancy, physical or mental disability	Yes; gender, citizenship, military status, and certain medical information for employees
Personal information categories in California’s Consumer Records statute	Name, social security number, physical characteristics, address, telephone number, driver’s license number, state identification number, education, employment, employment history, bank account numbers, credit or debit card numbers, medical information, health insurance information, signature	Yes
Professional or employment-related information	Prior employment history, performance information, resume or similar information	Yes
Non-public education information	Education records directly related to a student that are maintained by an educational institution pursuant to the Family Educational Rights and Privacy Act, such as grades, disciplinary records, student schedules, and financial aid information	Yes

How We Use This Information

We use the personal information that we collect from job applicants, employees, and contractors for the following purposes:

• To consider job applicants for current and potential future employment opportunities.
• To evaluate job applicants’ employment applications and corroborate the information contained in the applications and any supporting documents.
• To schedule job applicants for interviews and communicate with them about their application and employment opportunities.
• For all employment-related purposes, including (but not limited to): (1) administration and coordination of benefits; (2) payroll and reimbursement; (3) performance reviews, promotions, disciplinary actions, and other Human Resource functions; (4) to administer and facilitate employees’ performance of their job duties; and (5) any other employment-related purpose.
• To negotiate, perform, and review any contracts with, and services being provided by, service providers.
• To comply with applicable laws, regulations, and legal process.
• In any other way we may describe when you provide the information.
• To keep a record of our interactions and communications with job applicants, employees, and contractors.
• As otherwise necessary or useful for us in conducting our business, provided the use is permitted by law.
• For the protection of our operations or those of any of our affiliates, or to protect our rights, privacy, safety or property, or that of our affiliates, employees, or other parties.
• For any other purposes with your consent.