Safe Harbor Privacy Statement
This Safe Harbor Privacy Statement (this “Statement”) sets forth the principles followed by Worldwide Clinical Trial Drug Development Solutions (“WCT DDS” or “Company”) in connection with the transfer and protection of personal data received from the European Union (“EU”) in support of the Company’s laboratory and clinical trial operations, as more specifically set forth below.
WCT DDS adheres to the Safe Harbor privacy principles agreed to by the European Commission and the United States, implemented in accordance with the guidance set forth in the Frequently Asked Questions (“FAQs”) issued by the U.S. Department of Commerce on July 21, 2000. See www.export.gov/safeharbor. This Statement sets forth the principles under which WCT DDS manages the processing of certain categories of Personal Data, referred to hereafter as “Covered Personal Data.”
This Statement sets forth in manner in which WCT DDS manages the processing of Covered Personal Data.
“Personal Data” means any information relating to an identified or identifiable natural person (a “Data Subject”), received by WCT DDS from the EU, and recorded in any form. It does not include information that has been anonymized, pseudonymized, encoded, or otherwise stripped of its identifiers, nor does it include publicly available information unless combined with other non-public personal information.
“Covered Personal Data” means: (1) Personal Data relating to clinical trial subjects and specimen donors that is collected by WCT DDS in the EU; and (2) Personal Data relating to clinical trial subjects and specimen donors that is both: (a) collected in the EU by; and (b) transferred to WCT DDS from the EU by, companies with whom WCT DDS contracts to provide laboratory and/or clinical trial services.
An “identifiable natural person” is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural, or social identity.
An “Agent” means any third party that uses Covered Personal Data provided to WCT DDS to perform tasks under the instructions of, and solely for, WCT DDS, or to whom WCT DDS discloses personal data for use on WCT DDS’s behalf.
“Sensitive Personal Information” means Covered Personal Data about an EU citizen specifying medical or heath conditions, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, or information specifying the sex life of the individual.
Safe Harbor Privacy Principles
The following privacy principles (the “Privacy Principles”) apply to the transfer, collection, use, and disclosure of Covered Personal Data.
When Covered Personal Data is data WCT DDS collects directly from clinical trial subjects or specimen donors in the EU, WCT DDS will inform such individuals about the purposes for which it collects and uses the Covered Personal Data, the types of third parties with whom WCT DDS shares the Covered Personal Data, and the choice and means WCT DDS offers for limiting the use and disclosure of that individual’s Covered Personal Data. Notice will be provided in clear and conspicuous language when individuals are first asked to provide Covered Personal Data to WCT DDS, or as soon as practicable thereafter, and in any event before WCT DDS uses the information for a purpose other than that for which it was originally collected or processed, and before WCT DDS discloses such Covered Personal Data for the first time to a non-Agent third party. WCT DDS does not currently, and does not intend to, directly collect any Personal Data within the EU; however, if in the future WCT DDS does directly collect Personal Data relating to clinical trial subjects or specimen donors within the EU, such Personal Data shall be Covered Personal Data in accordance with definition number (1) of Covered Personal Data above.
When Covered Personal Data is Personal Data WCT DDS receives relating to clinical trial subjects and specimen donors that is both collected in the EU by, and transferred to WCT DDS from the EU by, companies with whom WCT DDS contracts to provide laboratory and/or clinical trial services, it will use such information in accordance with the notices provided by such entities and the choices made by the individuals to whom such Covered Personal Data relates.
WCT DDS will offer individuals the opportunity to choose (opt-out) whether their Covered Personal Data is (a) to be disclosed to a non-Agent third party, or (b) to be used for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. WCT DDS will ensure that individuals are provided clear and conspicuous, readily available, and affordable mechanisms to exercise choice.
For Sensitive Personal Information, WCT DDS will give EU individuals the opportunity to affirmatively and explicitly (opt-in) consent to the disclosure of the information to a third party and to the use of the information for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual through an opt-in choice. WCT DDS will treat any information about an EU citizen that is received from a third-party as sensitive if the third-party from whom WCT DDS receives the information identifies it and treats it as sensitive. However, opt-in consent is not required and will not be provided when the processing of such Sensitive Personal Information is in the vital interest of the Data Subject or another person; necessary for the establishment of legal claims or defenses; required to provide medical care or diagnosis; necessary to carry out WCT DDS’s obligations in the field of employment law; or related to data that is manifestly made public by the Data Subject.
There are certain limitations on the right to opt-out, such as those that apply in the clinical research situation. In that situation, WCT DDS will continue to rely upon and process Covered Personal Data already provided by clinical research participants who choose to discontinue participation in a clinical trial, but will not collect any additional Covered Personal Data about that individual once the written request to withdraw from participation is received.
3. Onward Transfer
WCT DDS will not transfer any Covered Personal Data of an EU individual to a third party without applying the Notice and Choice principles to such transfer. WCT DDS will only transfer Covered Personal Data of an EU individual to third parties where: (a) the third-party has entered into a written agreement with WCT DDS that provides the same level of protection for the information as is required by the Privacy Principles; (b) is located in the EU or a country whose laws provide adequate assurance of protection, as determined by the European Commission; or (c) the third-party has certified to its compliance with the Safe Harbor privacy principles, and is accordingly independently responsible for compliance with the Safe Harbor requirements.
WCT DDS will take reasonable precautions to protect Covered Personal Data of an EU individual from loss, misuse and unauthorized access, disclosure, alteration and destruction.
5. Data Integrity
WCT DDS seeks to ensure that any Covered Personal Data about EU individuals is relevant for the purposes for which it is to be used. WCT DDS will not utilize any Covered Personal Data about EU individuals in a way that is incompatible with the purposes for which it has been collected or subsequently authorized. WCT DDS will ensure that the Covered Personal Data of EU individuals is reliable for its intended use, accurate, complete, and current.
WCT DDS will provide EU individuals reasonable access to their Covered Personal Data held by WCT DDS for the purposes of verifying its accuracy, and exercising their right to have inaccurate information corrected, amended, or deleted. Such access will not be provided when the burden or expense of providing access would be disproportionate to the risks to the EU individual’s privacy, or where the rights of other persons would be violated. Moreover, an EU individual’s access to their own Covered Personal Data may be restricted for a period of time (during the laboratory or clinical trial operation and while the results of such operation are being analyzed) in order to not jeopardize the integrity of the research effort for which such Covered Personal Data was collected and is being utilized.
Access may also be denied under the circumstances set forth in response to Question No. 5 of FAQ 8. Specifically, access may be denied to the extent disclosure is likely to interfere with the safeguarding of important countervailing public interests, such as national security; defense; or public security. In addition, where the Covered Personal Data is processed solely for research or statistical purposes, access may be denied. Other reasons for denying or limiting access are:
- interference with execution or enforcement of the law, including the prevention, investigation or detection of offenses or the right to a fair trial;
- interference with private causes of action, including the prevention, investigation or detection of legal claims or the right to a fair trial;
- disclosure of personal information pertaining to other individual(s) where such references cannot be redacted;
- breaching a legal or other professional privilege or obligation;
- breaching the necessary confidentiality of future or ongoing negotiations, such as those involving the acquisition of publicly quoted companies;
- prejudicing employee security investigations or grievance proceedings;
- prejudicing the confidentiality that may be necessary for limited periods in connection with employee succession planning and corporate re-organizations;
- prejudicing the confidentiality that may be necessary in connection with monitoring, inspection or regulatory functions connected with sound economic or financial management; or
- other circumstances in which the burden or cost of providing access would be disproportionate or the legitimate rights or interests of others would be violated.
If access is denied or limited, WCT DDS will provide you the reasons for denying or limiting such access, and will provide you a contact point for further inquiries.
WCT DDS has established internal mechanisms to verify its ongoing adherence to this Statement. Any EU individual who has a reasonable concern about WCT DDS’s handling of their Covered Personal Data may raise those concerns with WCT DDS by contacting WCT DDS at the address below. WCT DDS will seek to reasonably resolve such concerns. If WCT DDS does not reasonably resolve such concerns, you should contact the American Arbitration Association at 1633 Broadway, 10th Floor, New York, New York 10019, Telephone 212-716-5800, Fax: 212-716-5905.
Limitation on Scope of Principles
WCT DDS adheres to these Privacy Principles except where statute, regulation, or case-law (collectively, “Applicable Law”) creates conflicting obligations or provide explicit authorizations. Where Applicable Law creates conflicting obligations, WCT DDS will comply with the Applicable Law. Where Applicable Law provides explicit authorizations, WCT DDS may deviate from these Privacy Principles; however, any such deviation will be limited to the extent necessary to meet the overriding legitimate interests furthered by such authorization.
How to Contact Us
Please contact WCT DDS with any questions concerning this Statement at:
Worldwide Clinical Trials Drug Development Solutions, Inc.
8605 Cross Park Drive
Austin, Texas 78754
(toll-free) 1 800.735.5022
Changes to this Privacy Statement
This privacy statement may be amended consistent with the requirements of the Safe Harbor arrangement. When we do update the privacy statement, we will also revise the “Last Updated” date at the bottom of this document.
Last Updated: September 2013