Privacy Policy

NOTICE OF TIAA-CREF PRIVACY POLICY

Please read this carefully. It provides information about the privacy policy of TIAA-CREF Tuition Financing, Inc., and TIAA-CREF Individual & Institutional Services, LLC (collectively referred to as "TIAA-CREF"). The TIAA-CREF privacy policy concerns nonpublic personal information ("personal information") that TIAA-CREF may have about current and former Account Owners in the Path2College 529 Plan (the "Program").

TIAA-CREF may collect personal information about you from various sources. That includes personal information that you give: on the Application; on Program forms; and on interactive tools. It may also include personal information about your participation in the Program, such as your investment options. TIAA-CREF may also obtain certain of your personal information from third parties, such as consumer reporting agencies.

We use your personal information to effect your investment in the Program and to effect related services. Your personal information also is available to the Board and to the Director of the State's Office of Treasury and Fiscal Services in its role as Trustee. We may share your personal information with our affiliates for purposes of providing you information about their products and services and to mail you their materials ("affiliate materials"). You can opt-out of sharing your personal information with affiliates by: checking the appropriate box on your Account Application; or calling TIAA-CREF toll free at 1(888) 381-8288. TIAA-CREF's affiliates include: insurance companies; broker-dealers; investment companies; investment advisors; and a trust company.

TIAA-CREF limits access to your personal information to those employees who must know it to provide Program-related services. TIAA-CREF may also give your personal information to service providers: who process your transactions; mail you Program documents and affiliate materials; or enhance your Program benefits.

We protect your personal information by physical, electronic and procedural safeguards as required by federal and state laws.

TIAA-CREF does not disclose your personal information to any other person outside of the Program, unless you consent or it is permitted under applicable federal and state laws. TIAA-CREF may also disclose your personal information if it is allowed or required by its contract with the Board. With your consent or if allowed by law, we will provide your personal information to the financial advisor you designate.

NOTICE ABOUT ONLINE PRIVACY

Safeguarding your online personal information is something that the Path2College 529 Plan (the "Program") takes very seriously. Personal information provided to the Program is not sold or bartered. In addition, the personal information provided by you online through the Program Web site is not revealed to any person or organization outside of TIAA-CREF Tuition Financing, Inc., its affiliates and subcontractors, its parent company, Teachers Insurance and Annuity Association of America (TIAA), and the Board of Directors (and its staff) unless:

• Proper authorization or direction from you to do so has been received,
• It is permitted by law, or
• It is necessary to do so in order to enable service providers to perform work on behalf of the Program.

When you visit the Program Web site, you can go to pages that are open to the general public or log onto secure pages to enroll in the Program, access information about your Account, or conduct certain transactions on the Account. Once you have opened an Account in the Program, access to the secure pages of the Program Web site is permitted only after you have supplied your Social Security Number or Taxpayer Identification Number and Password. This information serves to verify your identity, so that only you can access your Account and initiate transactions through the Program Web site.

The following categories of personal information will be requested from you if you choose to enroll in the Program or access your Account online: (1) your name and your Beneficiary's name; (2) complete physical address information; (3) telephone numbers; (4) your gender; (5) Social Security Numbers or Taxpayer Identification Numbers for yourself and your Beneficiary; (6) your date of birth and your Beneficiary's date of birth; (7) depending on your method of contribution, certain banking information; and (8) at your option, your relationship to the Beneficiary and your e-mail address.

The Program is committed to protecting your privacy online. When you enter personal data into the Program Web site (including your Social Security Number or Taxpayer Identification Number and your password) to enroll or access your Account online, you will log into secure pages where we use Secure Sockets Layer (SSL) protocol for protecting information. SSL has been universally accepted on the Internet for authenticated and encrypted communication between clients and servers. In addition, all online enrollment or Account transaction data that you send to us and we confirm back to you, is sent over an encrypted SSL connection protected with a mechanism for detecting tampering -- that is, for automatically determining whether the data has been altered in transit. This generally means that the data sent is encrypted and can only be decrypted by our Web server. Your data is stored on a secure server behind our firewall, which works to restrict access to your data from outside the server.

To use this section of the Program Web site you need a browser that supports encryption and dynamic Web page construction. We strongly recommend Netscape navigator version 4.0 or higher, or Microsoft Internet version 4.0 or higher.

To help ensure the confidentiality and integrity of your information:

• Do not share your password, Social Security Number or Taxpayer Identification Number with anyone.
• Call the Program's toll-free number at 1 (877) 424-4377 if you suspect any willful misuse of this site.

If you decide not to enroll online and you want to request Program materials to be mailed to you, or you want to subscribe to the Program e-mail newsletter, you can click on another section of the Program Web site (i.e., the Request Enrollment Kit page of the Enroll Today section) to provide your name, mailing address and e-mail address, respectively. The personal information that you provide on that page of the site will be stored and used to market the Program more effectively. Although that page of the Program Web site does not use SSL encryption protocol, your information will be safeguarded in accordance with federal and state privacy laws and industry norms.

If you need to inform us of changes or corrections to personal information that you have provided through online enrollment or online Account transactions, please follow the instructions in the Access Your Account section of the Program Web, or download and complete an Account Services form and mail it to the address provided on the form.

If you have provided us with mailing or e-mail information in order to request mailing of an enrollment kit or to subscribe to our e-mail newsletter, you will not be able to review and correct that information online. However, if you want to request another enrollment kit or re-subscribe to the e-mail newsletter, and your mailing or e-mail information has changed, you can go to the Open An Account section of the Program Web site and click on the Request Enrollment Kit link to enter your new e-mail and/or mailing address.

We use cookies on the Program Web site to measure marketing results for the Program. This process renders all visitors to the Program Web site anonymous and will not personally identify you. Please read the notice below about the limited way that cookies are used on this site:

Because your privacy is important to us, we are advising you that a cookie may be placed on your browser that (1) identifies a particular Internet advertisement that brought you to the PROGRAM Web site and tracks the pages visited on this site; (2) counts your computer as it enters the Program Web site and tracks the pages visited on this site; or (3) facilitates your navigation and use of this site. The sole purpose of this cookie, which you may delete at any time, is to count the number of visitors to the Program Web site so that marketing results for the Program can be measured and navigation of the site can be enhanced. Absolutely no personally identifiable information about you will be collected, used, or stored through this process. We do not track or record information about individuals who visit this site. If you provide personal information on this Web site, such as by enrolling online, or requesting Program materials or the e-mail newsletter, that information will be collected, stored and used (as discussed above) in accordance with federal and state privacy laws.

The Program periodically reviews its privacy policies and procedures and reserves the right to amend them. If we amend some portion of our privacy policies, we will continue our commitment to keeping your personal information secure. We will notify you of any changes to our privacy policies by posting them on the Program Web site and, if a material change affecting Account Owners is made, we will give Account Owners written notice of that change.

Effective date: 7/1/04.