This PRIVACY NOTICE FOR WASHINGTON AND NEVADA STATE RESIDENTS supplements the information contained in the Privacy Policy of Biogen and its subsidiaries (collectively, “we,” “us,” or “our”) and applies solely to visitors, users, and others who reside in the States of Washington or Nevada or a natural person whose Consumer Health Data is collected in Washington or Nevada (“you”). It does not apply to our employees, contractors or business contacts. We adopt this notice to comply with the Washington My Health My Data Act and the Nevada Consumer Health Data Privacy Law (collectively “the regulations.”) Any terms defined in the regulations have the same meaning when used in this notice.
In the event of a conflict between any other policy, statement, or notice and this Consumer Health Data Privacy Policy, this policy will prevail as to Consumer Health Data collected.
1. Consumer Health Data We Collect
Biogen may collect Consumer Health Data that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status. Consumer Health Data does not include publicly available Data or deidentified data or data explicitly excluded from coverage by the regulations.
The Consumer Health Data we collect depends on your interaction with Biogen and the choices you make, including your privacy settings, products and features you use, your location, and applicable law. Because Consumer Health Data is defined broadly, many of the categories of data we collect could also be considered Consumer Health Data. We will only collect data about you that is necessary for one or more of our legitimate business purposes, or is required by law. Examples of Consumer Health Data we may collect include:
- Individual health condition, treatment, disease, or diagnosis information;
- Health-related information such as individual health condition, treatment or disease, medical procedure, use or purchase of prescribed medication, bodily function, vital signs, symptoms, or measurements of physical or mental health status, diagnosis or diagnostic testing, treatment, or medication information;
- Biometric Data, such as genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data;
- Precise location information that could reasonably indicate a resident's attempt to acquire or receive health services or supplies;
- Data that may identify an individual seeking health care services such as: social, psychological, behavioral, and medical intervention information;
- Inferences drawn from other personal data, such as: person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.
2. Why We Collect and Use Consumer Health Data
Primarily, we collect and use Consumer Health Data as reasonably necessary to facilitate providing services and products to you, such as certain patient support service offerings. This may include delivering and administering our products, and other essential business operations that support the provision and administration of the products (such as analyzing our performance, meeting our legal obligations, developing our workforce, reporting on adverse events, monitor our regulatory compliance, and other analysis of our programs and services).
We may use Consumer Health Data for other purposes for which we give you choices and/or obtain your consent as required by law – for example, for advertising or marketing purposes.
3. The Sources from Which Biogen Collects Consumer Health Data
We collect personal data (which may include Consumer Health Data) directly from you, from your interactions with Biogen (online and offline), our products and services, from third parties, and from publicly available sources. We obtain the categories of personal information listed above from the following categories of sources:
- Directly from you or your caregivers or agents;
- Indirectly from you, your caregivers, or agents. For example, information we collect in the course of providing services;
- Directly and indirectly from activity on our websites. For example, website registration information; and
- From third parties in connection with the services that we perform.
4. Categories of Consumer Health Data We Share
Biogen may share all the categories of Consumer Health Data listed above in Section 1.
5. Categories of Third Parties and Affiliates with Whom We Share
The categories of Third Parties with which Biogen may share Consumer Health Data include:
- Biogen, Inc., and affiliates including:
- Biogen MA Inc.
- Biogen International GmbH
- Reata Pharmaceuticals, Inc.
- Partners with whom we have contractual data sharing agreements;
- Vendors and service providers who help us provide these services;
- Third parties to whom you or your agents authorize us to disclose your Consumer Health Data in connection with products or services we provide to you;
- Regulators, such as the FDA;
- Law enforcement and government agencies, where required or permitted by law or court order;
- Biogen’s external advisors (accountants, auditors, and legal advisors).
6. Your Privacy Rights and Choices
The regulations provide certain rights with respect to Consumer Health Data, including a right to confirm, access, delete or withdraw consent relating to such data, subject to certain exceptions. You can exercise your privacy rights by submitting a request as outlined below.
To exercise your rights with respect to your Consumer Health Data, depending on your state of residence, you may contact us at any time through any of the following methods.
If you have any concerns about the way your Consumer Health Data has been collected or handled by Biogen, queries regarding this privacy statement, or would like to exercise your rights with regard to your Consumer Health Data, you can contact Biogen’s Global Privacy Office at privacy@biogen.com
You can also write the following address:
Global Privacy Office
Biogen MA Inc.
225 Binney Street
Cambridge, MA 02142
USA
Biogen reserves the right to amend this policy at any time. If Biogen materially changes its privacy practices, our Consumer Health Data Privacy Policy will be updated to reflect these changes and the effective date of our revised policy will be referenced below.
Effective Date: March 31, 2024