Data privacy notice for use of personal data and human biosamples

At Novo Nordisk we focus on bringing new innovative medicine to the market and make them available across the world. We do this to defeat diabetes and other serious chronic diseases to the benefit of patients.

To develop new medicine, we need to do research to learn more about the disease. We collect infomration from patients and from clinical studies. Some of this information is personal data.

Examples of personal data are:

• human biosamples (for example tissues, blood and blood derivatives such as plasma, serum and cells)
• data colleced during clinical studies or from external parties (for example results, information and discoveries) medical images (for example scanning, radiography and x-ray)

We use and collect the personal data in a responsible and ethical way in accordance with our internal values, external requirements e.g. good clinical practice, and the applicable laws and guidance. When doing clinical research, we ensure that the participants are well informed about the study before they decide if they want to take a part.

For some research activities, we need data that we cannot collect ourselves. For this we may use data form external parties. We have high standards when doing so. We make sure that all data can be used for the intended purposes. We also carefully assess that the personal data have been lawfully and ethically collected.

 

It is important to Novo Nordisk to respect your rights and to keep your personal data private. The Privacy Notice explains how we protect and process your personal data, including human biosamples. How we collect, use, store, delete and share your personal data will be explained in more detail in the Privacy Notice.

As a general rule, we will not be able to identify you directly in our research activities. We do this by replacing personal identifiers (for example, name or address) with a participant number. This means that the information is coded data. We will only try to identify you if there is a serious safety concern.

When we re-use data from our clinical studies for new scientific research purposes, we will try to use anonymised data, meaning that there is no way to re-identify you.

Figure 1 below illustrates the different levels of masking personal data, where identified is personal data that has not been masked.

If It is not possible for us to use anonymised data for a specific research activities, we may use coded personal data. The Privacy Notice applies to search activites where Novo Nordisk uses personal coded data and is not able to provide a notice of use directly to you. An example could be where we get your health data from hospitals, relatives, partners, suppliers or other external parties. This could also be if we reuse already collected personal data for new compatible research purposes.