• Healthcare
  • Biopharmaceuticals
  • Biologics


Swiss-U.S. Privacy Shield Framework: Active

Original Certification Date: 4/30/2019
Next Certification Due Date: 4/6/2021
Data Collected: HR, NON-HR

EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 4/30/2019
Next Certification Due Date: 4/6/2021
Data Collected: HR, NON-HR

Purpose of Data Collection

Atara may use Personal Information to provide information requested, e.g. information about a product or program we are offering. Atara may also use Personal Information to deliver a specific program or service when an individual enrolls to receive the program or service. Use may include: managing information and accounts; responding to questions, comments and requests; providing access to certain areas and features of websites; and permitting clients/customers to register for events or participate in webinars or events. Atara may use the Personal Information for its administrative purposes, including, without limitation, to: measure interest in Atara’s Websites, programs or services; perform internal quality control; verify identity; send communications regarding the Website, programs or services, account, or any changes to any Atara policy or terms of service; prevent prohibited or illegal activities; and enforce our Terms of Use. Atara may use the Personal Information to provide materials about offers, products and services offered by us, including new content or services on Atara Websites. Atara may provide individuals with these materials by phone, postal mail, facsimile or email, as permitted by applicable law. If an individual does not wish us to use their Personal Information for marketing purposes, they may contact us at any time to opt out of the use of their Personal Information for such purposes. Atara may use Personal Information to create non-identifiable information that we may use alone or in the aggregate with information obtained from other sources, in order to help us to optimally deliver our existing products and services or develop new products, processes and services. Atara may use the content of any communications or other information submitted via the Websites, including any narratives, images, ideas, inventions, concepts, techniques, or know-how disclosed therein, for any purpose including developing, manufacturing, and/or marketing goods or services. However, Atara does not release names or otherwise publicize the fact that an individual submitted materials or other information to us unless: the individual grants Atara permission to do so; Atara first sends notice that the materials or other information submitted to a particular part of a site will be published or otherwise used with the individual’s name on it; or we are required to do so by law. Atara may use and share anonymized or aggregated information within the Atara group of companies or with Third Parties for public health, research, analytics and other legally permissible purposes. Atara may use Personal Information for which they have a legitimate interest, such as direct marketing, individual or market research, anti-fraud protection, or other purpose disclosed at the time of collection or with consent. Atara collects Personal Information from current, prospective and former Employees, their contact points in case of a medical emergency, and beneficiaries under any insurance policy (“Human Resources Data”). The Human Resources Data we collect may include title, name, address, phone number, email address, date of birth, passport number, driver’s license number, Social Security number or other government-issued identification number, financial information related to credit checks, bank details for payroll, information that may be recorded on a CV or application form, language abilities, contact information of third parties in case of an emergency and beneficiaries under any insurance policy. We may also collect Sensitive Human Resources Data such as details of health and disability, including mental health, medical leave, and maternity leave. Atara may share Personal Information with service providers that we have retained to perform services including provision of IT and related services; provision of information and services individuals have requested; payment processing; and customer service activities.

Privacy Policy

HR and Non-HR Data


Atara’s Privacy Policy ( is applicable to HR and non-HR personal data that includes commercial and supplier data.

Effective Date: 3/21/2019

Verification Method


Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Atara Biotherapeutics, Inc. at:

Danielle Graves
Head of Global Compliance, Privacy Officer
Atara Biotherapeutics, Inc.
611 Gateway Blvd.
South San Francisco, California 94080

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Atara Biotherapeutics, Inc. to your question or complaint, please contact the independent recourse mechanism listed below

Appropriate statutory body with jurisdiction to investigate any claims against Atara Biotherapeutics, Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission