Last Updated: March 15th, 2024

Novartis Pharmaceuticals Corporation (“Novartis,” “we,” “our,” or “us”) is a United States-based affiliate of the Novartis Global Group, a world leader in health care. Pursuant to the Washington My Health My Data Act and the Nevada Consumer Health Data Privacy Law (together, the “Health Privacy Laws”), we are providing the following details regarding the categories of Consumer Health Data that we collect, use, and share about Washington and Nevada consumers. This US Consumer Health Data Privacy Policy for Washington and Nevada Residents (the “Policy”) supplements our US Privacy Policy.
For purposes of this Policy, “Consumer Health Data” means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer's past, present, or future physical or mental health status.

Collection of Consumer Health Data

The Consumer Health Data we may collect from you includes:

  • Health conditions, treatments, diseases, or diagnoses
  • Social, psychological, behavioral, or medical interventions
  • Health-related surgeries or procedures
  • Use or purchase of prescribed medication
  • Bodily functions, vital signs, symptoms, or measurements
  • Diagnoses or diagnostic testing, treatment, or medication
  • Gender-affirming care information
  • Reproductive or sexual health care information
  • Biometric information
  • Genetic information
  • Precise location information that could reasonably indicate your attempt to acquire or receive health services or supplies
  • Information that could identify your attempt to seek health care services
  • Any inferences of the above categories of health data derived or extrapolated from non-health information

Sources of Consumer Health Data

We may collect Consumer Health Data from you and from joint marketing partners, public databases, providers of demographic data, publications, social media platforms, caregivers, and other third parties.

How we use and share Consumer Health Data

We may collect, use, and share Consumer Health Data to operate, manage, and maintain our business, to provide our products and services, and to accomplish our business purposes and objectives, including, for example, developing, improving, repairing, and maintaining our products and services; personalizing, advertising, and marketing our products and services; facilitating social sharing; conducting research, analytics, and data analysis; undertaking quality and safety assurance measures; conducting risk and security controls and monitoring; detecting and preventing fraud; performing identity verification; performing accounting, audit, and other internal functions, such as internal investigations; entering into, tracking, and performing agreements with customers and suppliers; processing payments; providing customer support and responding to requests for information; complying with law, legal process, and internal policies; maintaining records; exercising and defending legal claims; and protecting the physical safety of natural persons. We may also use Consumer Health Data and share it with a third party in the context of any reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceedings). We may share each of the categories of Consumer Health Data listed above with the following categories of third parties:

  • Our affiliates;
    • A full list of our affiliates can be found here: novartis.com
  • Our service providers;
  • Public and governmental authorities;
  • Other third parties.
    • In certain circumstances, it may be necessary to provide Consumer Health Data to other third parties, for example, to comply with applicable law or to protect the rights, safety, or property of us, you, and others.

We do not “sell” Consumer Health Data, as defined in the Health Privacy Laws.

Individual rights

If you are a Washington or Nevada consumer, you may make certain requests regarding your Consumer Health Data, subject to applicable law and certain exceptions. These requests may include: to know whether we are collecting or sharing your Consumer Health Data; to know the third parties to whom we have shared your Consumer Health Data and their contact information; to opt out of the collection or sharing of your Consumer Health Data; to delete, access, amend, or review your Consumer Health Data.

To make a request under this Policy, or to appeal a refusal to take action on your request, please contact us online or call 1 888 NOW NOVA (1 888 669 6682). We will verify and respond to your request consistent with applicable law. We may need to request additional information from you in order to verify your identity and protect against fraudulent requests. If you make a deletion request, we may ask you to confirm your request before we delete your Consumer Health Data.

Changes to this policy

We may change or update this Consumer Health Data Privacy Policy from time to time. When we do, we will post the revised version on this page with a new “Last Updated” date.