Other Covered Entities

Biomatrica, Inc.
CG Growth, LLC
Data In Motion, LLC
Exact Receivables LLC
Exact Sciences Laboratories, LLC
Exact Sciences RDX LLC
Exact Sciences Thrive, LLC
Exact Sciences Ventures, LLC
Genomic Health International Holdings, LLC
Genomic Health, Inc.
Oncotype Laboratories, Inc.
Paradigm Diagnostics, Inc.
Prevention Genetics, LLC
PSF Genomics, Inc.
Sampleminded, Inc.
Thrive Earlier Detection Securities Corp

Industries

  • Healthcare
  • Medical Devices

Participation

EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 1/7/2020
Next Certification Due Date: 9/21/2024
Data Collected: HR, NON-HR

Swiss-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 1/7/2020
Next Certification Due Date: 9/21/2024
Data Collected: HR, NON-HR

Purpose of Data Collection

Exact Sciences Corporation and its affiliates and subsidiaries covered by Privacy Shield (collectively, “Exact Sciences”) process non-HR personal data, including sensitive data, from and about individuals located in the EU, Switzerland, or UK, either as a controller or a processor, and in accordance with the Exact Sciences Privacy Policy and, as applicable, data processing agreements to which Exact Sciences is a party. As a controller, Exact Sciences collects (1) website personal data directly from individuals when they visit one of Exact Sciences’ websites (collectively, the “Sites”) and (2) personal data about suppliers and customers. Exact Sciences may use any of the personal data described above to (1) respond to and communicate with individuals and health care providers about their requests, questions and comments; (2) operate, evaluate and improve the company’s business (including developing new products and services; managing communications; determining the effectiveness of the company’s sales, marketing and advertising; analyzing and enhancing the Sites and the company’s products and services; and performing accounting, auditing, billing, reconciliation and collection activities); (3) carry out its contractual obligations, including performing services on behalf of healthcare providers; (4) manage its relationships with existing or potential suppliers, customers, or end users; (5) perform data analyses and other processing (including market and consumer research, trend analysis, financial analysis, anonymization, encryption and tokenization of personal data); (6) protect against, identify and prevent fraud and other criminal activity, claims and other liabilities; (7) comply with and enforce applicable legal requirements, relevant industry standards and the company’s policies; or (8) otherwise as described in the Exact Sciences Privacy Policy or other notice provided at the time of data collection. Exact Sciences may also be a controller with respect to clinical research subject personal data. Exact Sciences may use these data as permitted by the relevant study agreement and protocol. As a processor, Exact Sciences processes personal and patient data, including sensitive data such as health information, concerning data subjects in the EU, Switzerland, or UK when a health care provider submits personal data in connection with clinical trials or an order for our products or use of our services. Exact Sciences collects HR-related personal data about potential employees, employees, and the employees of its subsidiaries and affiliates who are located in the EU, Switzerland, or UK in order to carry out and support general employment and human resources functions and activities, as well as for compliance purposes. In addition, Exact Sciences obtains relevant personal data about employees’ emergency contacts and other individuals (such as spouse, family members, dependents and beneficiaries) to the extent employees provide such information to the company. Exact Sciences processes this information to comply with its legal obligations and to carry out the employment relationship, such as for pension and benefit management, performance assessment, training, recruitment, investigating and enforcing compliance with law or policy, monitoring and security, IT management, HR planning and management, and internal communications.

Privacy Policy

HR Data

Exact Sciences European Employees Privacy Policy
Description:

This European Employees Privacy Policy (the “Policy”) specifically outlines Company’s data protection practices with respect to Personal Data collected from Company Employees located in the European Economic Area (“EEA”) and Switzerland (“European Employees” or “Employees”). This Policy also provides European Employees with an explanation of their data protection rights.

Effective Date: 11/7/2019

Non-HR Data

Description:

Public-facing privacy policy to be posted on the company's website.

Effective Date: 9/22/2023

Verification Method

Self-Assessment

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Exact Sciences Corporation at:

Karen Smith
Chief Privacy Officer
Exact Sciences Corporation
441 Charmany Drive
Madison, Wisconsin 53719

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Exact Sciences Corporation to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against Exact Sciences Corporation regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission