Company: FRFXF
Filing Date: 2025-10-01
Form Type: F-10
Source: 0001104659-25-095645
Chunk: 102

Company: FAIRFAX FINANCIAL HOLDINGS LTD/ CAN
Filing Date: 2025-10-01
Form: F-10
Chunk 102
---
. government and is applied when calculating the present value of loss of earnings for claims settlement purposes. A change in the discount rate used in the Ogden Tables impacts all relevant claims settled after that date, regardless of whether the insurance to which the claim relates was priced on that basis or not (or occurred after that date or not). A reduction in the Ogden discount rate increases lump sum payments to personal injury claimants, and in consequence the amount of reserves required to be held by insurers in relation to outstanding claims. The U.K. Government recently aligned the Ogden discount rate in England and Wales, Scotland and Northern Ireland at 0.5%.

Data protection

The United Kingdom and the European Union are subject to data protection laws, which regulate the obtaining and use of personal data relating to living individuals. As a result of leaving the European Union, the key data protection laws of the United Kingdom are the U.K. General Data Protection Regulation

<div align='center'>61</div>

TABLE OF CONTENTS

(“

### UK GDPR
”), supplemented by the Data Protection Act 2018. The UK GDPR currently aligns with the European Union’s GDPR (“

### EU GDPR
”), which applies across the EEA (also supplemented by national data protection laws), which has applied since May 25, 2018. The UK GDPR or EU GDPR (as applicable) applies to everyone working in Fairfax’s businesses in the EEA and the United Kingdom, as well as Fairfax’s businesses outside the EEA or the United Kingdom that provide services to or monitor individuals (including customers) in the EEA or the United Kingdom (as applicable) as a result of the extraterritorial application of these laws. The UK GDPR and/or EU GDPR require, among other things, businesses to: (a) process personal data fairly, lawfully and transparently, for specified and legitimate purposes and in accordance with data minimization; (b) store personal data no longer than needed; (c) adequately protect personal data; and (d) demonstrate compliance. Businesses are also required to perform data protection impact assessments on a mandatory basis when undertaking high risk data processing activities, and to respond to requests to exercise rights granted to individuals in respect of their personal data including to allow individuals to request access to their data, the erasure/correction of their data and data portability (in some cases subject to certain restrictions).

The UK GDPR and EU GDPR prohibit companies from transferring personal data from inside the EEA or the United Kingdom to countries that are outside