Other Covered Entities
Industries
- Healthcare
- Medical Devices
Participation
EU-U.S. Data Privacy Framework Framework: Active
Swiss-U.S. Data Privacy Framework Framework: Active
Purpose of Data Collection
Exact Sciences Corporation and its affiliates and subsidiaries covered by Privacy Shield (collectively, “Exact Sciences”) process non-HR personal data, including sensitive data, from and about individuals located in the EU, Switzerland, or UK, either as a controller or a processor, and in accordance with the Exact Sciences Privacy Policy and, as applicable, data processing agreements to which Exact Sciences is a party. As a controller, Exact Sciences collects (1) website personal data directly from individuals when they visit one of Exact Sciences’ websites (collectively, the “Sites”) and (2) personal data about suppliers and customers. Exact Sciences may use any of the personal data described above to (1) respond to and communicate with individuals and health care providers about their requests, questions and comments; (2) operate, evaluate and improve the company’s business (including developing new products and services; managing communications; determining the effectiveness of the company’s sales, marketing and advertising; analyzing and enhancing the Sites and the company’s products and services; and performing accounting, auditing, billing, reconciliation and collection activities); (3) carry out its contractual obligations, including performing services on behalf of healthcare providers; (4) manage its relationships with existing or potential suppliers, customers, or end users; (5) perform data analyses and other processing (including market and consumer research, trend analysis, financial analysis, anonymization, encryption and tokenization of personal data); (6) protect against, identify and prevent fraud and other criminal activity, claims and other liabilities; (7) comply with and enforce applicable legal requirements, relevant industry standards and the company’s policies; or (8) otherwise as described in the Exact Sciences Privacy Policy or other notice provided at the time of data collection. Exact Sciences may also be a controller with respect to clinical research subject personal data. Exact Sciences may use these data as permitted by the relevant study agreement and protocol. As a processor, Exact Sciences processes personal and patient data, including sensitive data such as health information, concerning data subjects in the EU, Switzerland, or UK when a health care provider submits personal data in connection with clinical trials or an order for our products or use of our services. Exact Sciences collects HR-related personal data about potential employees, employees, and the employees of its subsidiaries and affiliates who are located in the EU, Switzerland, or UK in order to carry out and support general employment and human resources functions and activities, as well as for compliance purposes. In addition, Exact Sciences obtains relevant personal data about employees’ emergency contacts and other individuals (such as spouse, family members, dependents and beneficiaries) to the extent employees provide such information to the company. Exact Sciences processes this information to comply with its legal obligations and to carry out the employment relationship, such as for pension and benefit management, performance assessment, training, recruitment, investigating and enforcing compliance with law or policy, monitoring and security, IT management, HR planning and management, and internal communications.
Privacy Policy
HR Data
This European Employees Privacy Policy (the “Policy”) specifically outlines Company’s data protection practices with respect to Personal Data collected from Company Employees located in the European Economic Area (“EEA”) and Switzerland (“European Employees” or “Employees”). This Policy also provides European Employees with an explanation of their data protection rights.
Non-HR Data
Public-facing privacy policy to be posted on the company's website.
Verification Method
Self-Assessment
Dispute Resolution
Questions or Complaints?
If you have a question or complaint regarding the covered data, please contact Exact Sciences Corporation at:
Chief Privacy Officer
Madison, Wisconsin 53719
Privacy Shield organizations must respond within 45 days of receiving a complaint.
If you have not received a timely or satisfactory response from Exact Sciences Corporation to your question or complaint, please contact the independent recourse mechanism listed below
NON-HR RECOURSE MECHANISM
Appropriate statutory body with jurisdiction to investigate any claims against Exact Sciences Corporation regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission