Confidential, Proprietary and Personal Information Duke Energy's Code of Business Ethics

Duke Energy maintains and uses confidential, proprietary and personal information (“sensitive information”) in the course of doing business. This includes the company's sensitive information, as well as that of third parties, including customers and employees.

Duke Energy complies with laws protecting sensitive information from unlawful disclosure, as well as laws that require Duke Energy to detect, prevent and respond to the use of stolen personal information to establish or maintain a customer or shareholder account. Failure to comply with these laws and standards can cause harm to individuals, Duke Energy and third parties. The impact could include financial and legal liabilities, damages to the Duke Energy brand or adverse regulatory actions.  Failure to comply can also prohibit Duke Energy from conducting business within certain countries.

Our Responsibilities

Duke Energy employees are expected to protect Duke Energy and third-party sensitive information from unlawful disclosure or use, and to ensure that such information is handled properly throughout the organization.

Duke Energy employees must:

• Maintain the confidentiality of sensitive information.
• Use sensitive information for business purposes only.
• Use company procedures for labeling and handling sensitive information.
• Share sensitive information only with appropriate parties both within and outside of Duke Energy.
• Use health information solely for the administration of health plans or to satisfy regulatory requirements.
• Make sure that the use of sensitive information is consistent with our policies, affiliate restrictions, contractual obligations and applicable laws.
• Detect, prevent and respond to unauthorized use of personal information.
  

Duke Energy employees must not:

• Disclose sensitive information to individuals (including other employees) who do not have a business need to know the information. 
• Help a third party gain access to sensitive information without a legitimate business purpose.
  

Q&A

Q: What is confidential or proprietary information?

A: Confidential or proprietary information is any information that should not be shared with others without a legitimate business purpose.  This includes, but is not limited to:

• Inventions
• Operational information
• Strategic information about current and/or future business plans
• Supplier's pricing and specifications
• Research
• Records, such as financial, customer or personnel records
• Information designated as confidential or proprietary.

Q: What type of information would be considered personal information?

A: Any information collected by Duke Energy or its subsidiaries and affiliates that uniquely identifies a person or from whicha a person can be reasonably identified, and h collection, use or disclosure of which is governed by appicable law or regulation.  Personal information of an indivial, entity or government agency includes where applicable, but is not limited to:

• Protected health information,
• Social security number or national ID (or equivalent),
• Consumer report information,
• An entity's, or agency's name,or person’s first name or first initial and last name in combination with social security or employer taxpayer ID numbers
  • drivers license, state identification card, or passport numbers
  • banking information
  • credit card numbers
  • PIN codes
  • electronic ID numbers
  • private electronic mail names or addresses
  • private phone number
  • internet account numbers
  • identification names
  • digital signatures
  • any information that can be used to access a person’s financial resources
  • biometric data 
  • fingerprints 
  • passwords 
  • parent’s legal surname prior to marriage, or 
• Any other information protected by Duke Energy’s Policies, Standards, Procedures or applicable laws.