Columbia Bank Privacy Policy

COLUMBIA BANK PRIVACY DISCLOSURE (Revised May 2011)

Protecting your privacy is important to Columbia Bank and to our employees. We want you to understand what information we collect and how we use it. In order to provide our customers with a broad range of financial products and services as effectively and conveniently as possible, we use technology to manage and maintain customer information. Our privacy policy serves as a standard for all Columbia Bank employees for collection, use, retention and security of nonpublic personal information. This disclosure applies to all accounts or loans that are established for personal, family, or household purposes.

WHAT INFORMATION WE COLLECT

We may collect "nonpublic personal information" about you from the following sources:

• Information we receive from you on applications or other loan and account forms such as your name, address, social security number, assets, liabilities, and income;
• Information about your transactions with us, our affiliates or others such as your account balances, and payment history; and
• Information we receive from third parties such as consumer reporting agencies regarding your credit history or creditworthiness or your employer regarding your salary and job history.

If you have obtained credit life insurance in connection with a loan transaction, we may have collected medical information about you. We shared that information with the insurance company to process your insurance application. We may also share with the insurance company any other medical information you provide us with to assist in the processing of your claim.

If you have established a brokerage account, we will collect information about your investments and transactions with others or with us such as your account balances and investment transactions with other parties.

WHAT INFORMATION WE DISCLOSE TO OUR SUBSIDIARIES OR AFFILIATES

We may share information about our experiences or transactions with you or your account (such as your name, address, account balance and your payment history with us) or we may share other information you have authorized us to share to provide you with a requested product or service with companies related to us by common control or ownership ("affiliates"). An example of this is our wholly owned subsidiary, Columbia Investment Services, Inc., an insurance agency that sells annuities and other insurance products on the premises of Columbia Bank.

WHAT INFORMATION WE DISCLOSE TO NONAFFILIATED THIRD PARTIES

We do not disclose any nonpublic personal information about you to any third parties, except as permitted by law.

We may disclose nonpublic personal information about you described above to "nonaffiliated third parties" (i.e., third parties that are not members of our corporate family) only as permitted by law. For example, we may disclose nonpublic personal information about you to such third parties -

• When you have given your consent to do so;
• When we complete your transactions, such as paying your checks, processing your online bill payment transactions or processing your trade requests;
• When we share information with consumer reporting agencies;
• When we verify account status for merchants you want to pay by check;
• When we suspect fraud or for risk management purposes;
• When we are required by a federal, state, or local law or regulation; or
• When we receive a subpoena or are ordered by a court to do so.

We may also disclose, consistent with applicable law, all of the information we collect, as described above, to nonaffiliated third parties that perform marketing services on our behalf or to other financial institutions with which we have joint marketing agreements, but only when they agree to uphold and maintain our privacy standards when handling a customer's nonpublic personal information and to use it only to perform the services for which we hired them. An example of a company we have a joint marketing agreement with is Prime Vest Financial Services, Inc.; an independent registered broker-dealer, Member FINRA/SIPC, and provider of non-deposit investment products.

We do not provide nonpublic personal information to financial institutions or to nonaffiliated third parties to perform telemarketing services.

FORMER CUSTOMERS

If you decide to close your account(s) or become an inactive customer, we will continue to treat and safeguard your information as described in this notice.

HOW WE PROTECT YOUR INFORMATION

We take steps to safeguard customer information. We restrict access to your personal and account information to those employees who need to know that information to provide products or services to you. We maintain physical, electronic, and procedural safeguards that comply with federal standards to guard your nonpublic personal information.

HOW TO CORRECT ANY ERRORS

If you ever find any errors with your account or loan information, please call us at 1-800-522-4167. For errors regarding your brokerage account, please call 1-800-624-0999. It is our policy to investigate and correct errors in a timely manner that are brought to our attention.

To see the privacy policy for Columbia Bank, click here.

OTHER RELATED INFORMATION - IDENTITY THEFT

For information on Identity Theft there is an excellent source of information at the Federal Trade Commission (FTC) website. To access a useful FTC consumer education pamphlet entitled, Take Charge: Fighting Back Against Identity Theft.