Consumer Health Data Privacy Policy
Last updated: October 2026
Genentech, Inc. (“Genentech,” “we,” “our,” or “us”) values your privacy and the protection of your Personal Data. This policy supplements Genentech’s Privacy Notice and applies to collection of “consumer health data” as that term has been defined by applicable U.S. consumer health data laws.
Any terms in this policy that have been defined under applicable consumer health data laws shall have the meanings afforded to them therein.
This policy does not apply to any other Personal Data we collect.
Collection, Sources, Uses, and Sharing of Consumer Health Data:
We collect, use, and share the following categories of consumer health data (as further described below):
- Individual health conditions, treatment, diseases, or diagnosis;
- Social, psychological, behavioral, and medical interventions;
- Health-related surgeries or procedures;
- Use or purchase of prescribed medication;
- Bodily functions, vital signs, symptoms, or measurements of the information described in this subsection;
- Diagnoses or diagnostic testing, treatment, or medication;
- Reproductive or sexual health information;
- Genetic data;
- Data that identifies a consumer seeking health care services; and
- Any information that we, or one of our processors, processes to associate or identify a consumer with the data described above that is derived or extrapolated from non-health information (such as proxy, derivative, inferred, or emergent data by any means, including algorithms or machine learning).
The types of consumer health data we collect and disclose depends on your relationship with Genentech. Not all of the consumer health data listed in the following charts may apply to you. If the nature of your relationship with Genentech changes, additional categories of consumer health data may also apply.
Users of Online Services, Visitors to Our Websites and Physical Locations, and Senders of Inquiries
We may process your consumer health data when you: (1) visit our websites and our physical locations; (2) submit inquiries to us both online (e.g., via email) or offline (e.g., by written letters); (3) sign up for our newsletters or other informational or marketing materials; and/or (4) register for, visit, or use our online Products and Services.
Examples of consumer health data collected, used, and shared
- Individual health conditions, treatment, diseases, or diagnosis
- Use or purchase of prescribed medication
- Data that identifies a consumer seeking health care services
- Derived or inferred data
Sources of consumer health data
- you directly
- automatically, such as via cookie or other tracking technologies or via call center recordings
- those authorized to provide on your behalf such as your caregiver or authorized representative
- your devices
- our vendors
- third parties that provide access to information you make publicly available, such as social media
- companies conducting non-clinical research such as market research companies
Why do we use the consumer health data?
- to enroll you in our programs and provide you with our Products and Services
- to administer our relationship with your organization
- to send you updates
- to customize content for you
- to improve our Products and Services
- for short-term, transient use
- for administrative purposes
- for marketing, internal research, and development
- for quality assurance and to assist in training and development of our representatives
- to improve our Online Services
- advertising and product promotion, including to contact you regarding programs, products, services, and topics that may be of interest or useful
- to engage in joint marketing initiatives
- to comply with legal and regulatory obligations
Who is the consumer health data shared with?
- Genentech, our affiliates, and related companies
- Our vendors who act on our behalf and provide us with services. For example, we use vendors to operate our services, process payments, to help us with our promotional efforts, and to provide information technology and hosting services, processing and fulfillment services, customer support and communication services, consulting services, survey management services, fraud prevention, detection, and mitigation, legal and professional services, and similar services
- Genentech’s lawyers, auditors and consultants
Patients Applying to or Enrolled in Patient Support Programs
We may process your consumer health data when you are applying to or enrolled in patient support programs.
Examples of consumer health data collected, used, and shared
- Individual health conditions, treatment, diseases, or diagnosis
- Medical interventions
- Health-related surgeries or procedures
- Use or purchase of prescribed medication
- Bodily functions, vital signs, symptoms, or measurements
- Diagnoses or diagnostic testing, treatment, or medication
- Genetic data
- Reproductive or sexual health information
- Derived or inferred data
Sources of consumer health data
- you directly
- your Healthcare Provider
- your devices
- our vendors and other third parties
- those authorized to provide on your behalf such as your caregiver or authorized representative
Why do we use the consumer health data?
- to enroll you in our programs and provide you with our Services
- to administer our relationship with you
- to send you updates
- to improve our Services
- for short-term, transient use
- for administrative purposes
- for quality assurance
- for marketing, internal research, and development
- to determine and verify program, product, and service eligibility and coverage
- to procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations
- advertising and product promotion, including to contact you regarding programs, products, services, and topics that may be of interest or useful
- to comply with legal and regulatory obligations
Who is the consumer health data shared with?
- Genentech, our affiliates, and related companies
- Healthcare Providers
- Our vendors who act on our behalf and provide us with services. For example, we use vendors to operate our services, to help us with our promotional efforts, and to provide information technology and hosting services, processing and fulfillment services, customer support and communication services, fraud prevention, detection, and mitigation, legal and professional services, and similar services
- Genentech’s lawyers, auditors, and consultants
- authorized legal representatives, family members, and caregivers
Patients and Users of Medical Products
We may process your consumer health data when you are the existing or prospective patient of a Healthcare Provider who is a Genentech customer and/or when you receive or use Genentech medical products (including, where applicable, mobile apps).
Examples of consumer health data collected, used, and shared
- Individual health conditions, treatment, diseases, or diagnosis
- Medical interventions
- Health-related surgeries or procedures
- Use or purchase of prescribed medication
- Bodily functions, vital signs, symptoms, or measurements
- Diagnoses or diagnostic testing, treatment, or medication
- Genetic data
- Reproductive or sexual health information
- Derived or inferred data
Sources of consumer health data
- you directly
- your Healthcare Provider
- your devices
- our vendors and other third parties
- those authorized to provide on your behalf such as your caregiver or authorized representative
Why do we use the consumer health data?
- to enroll you in our programs and provide you with our Products and Services
- to administer our relationship with you
- to send you updates
- to improve our Products and Services
- for short-term, transient use
- for administrative purposes
- for quality assurance
- for marketing, internal research, and development
- to determine and verify program, product, and service eligibility and coverage
- to procure vendor/supplier products and services, including to manage and satisfy related vendor/supplier contractual obligations
- advertising and product promotion, including to contact you regarding programs, products, services, and topics that may be of interest or useful
- to comply with legal and regulatory obligations
Who is the consumer health data shared with?
- Genentech, our affiliates, and related companies
- Healthcare Providers
- Our vendors who act on our behalf and provide us with services. For example, we use vendors to operate our services, process payments, to help us with our promotional efforts, and to provide information technology and hosting services, processing and fulfillment services, customer support and communication services, consulting services, survey management services, fraud prevention, detection, and mitigation, legal and professional services, and similar services
- Genentech’s lawyers, auditors, and consultants
- Authorized legal representatives, family members, and caregivers
Clinical Study Candidates
Clinical Study Candidates: We may process your consumer health data when you have been identified as a potential candidate for clinical studies sponsored by us or conducted by us on behalf of a third party.
If you are a participant in a clinical study, clinical trial, or other health-related research, you should receive a separate privacy notice regarding the Personal Data we process for those purposes. That privacy notice—and not this Notice— governs our processing of such Personal Data.
Examples of consumer health data collected, used, and shared
- Individual health conditions, treatment, diseases, or diagnosis
- Medical interventions
- Health-related surgeries or procedures
- Use or purchase of prescribed medication
- Bodily functions, vital signs, symptoms, or measurements
- Diagnoses or diagnostic testing, treatment, or medication
- Genetic data
- Reproductive or sexual health information
- Derived or inferred data
Sources of consumer health data
- you directly
- your Healthcare Provider
- your devices
- our vendors and other third parties
- your friends or family
- those authorized to provide on your behalf such as your caregiver or authorized representative
Why do we use the consumer health data?
- to administer our relationship with you
- to send you updates
- to determine your eligibility in one or more clinical studies
- to improve our Products and Services
- for short-term, transient use
- for administrative purposes
- for quality assurance
- to comply with legal and regulatory obligations
Who is the consumer health data shared with?
- Genentech, our affiliates, and related companies
- Our customers
- Healthcare Providers
- Clinical investigators and/or members of investigator teams
- Genentech’s lawyers, auditors, and consultants
- Authorized legal representatives, family members, and caregivers
- Our vendors who act on our behalf and provide us with services. For example, we use vendors to help us with our promotional efforts and to provide information technology and hosting services, customer support and communication services, consulting services, fraud prevention, detection, and mitigation, legal and professional services, and similar services
Exercising your rights
Depending on your state of residence, and subject to certain legal limitations and exceptions, you have the following rights with respect to any consumer health data we may collect about you:
- The right to confirm whether we are collecting, sharing, or selling your consumer health data and to access such data, including a list of all third parties and affiliates with whom we have shared or sold the consumer health data and an active email address or other online mechanism that you may use to contact these third parties;
- The right to withdraw consent from our collection and sharing of your consumer health data; and
- The right to have your consumer health data deleted.
If you would like to exercise your rights, as applicable, please utilize this form or, by calling us at 800-975-7105 (toll-free). We will respond to your request consistent with applicable law.
If your request to exercise a right under a consumer health data law is denied, you may appeal that decision by contacting our privacy support team via our web form.
Supplement to Consumer Health Data Privacy Policy for Nevada Consumers
This Supplement applies to Nevada consumers for purposes of providing additional disclosures required by Nevada’s Consumer Health Data Privacy Law. Terms used herein that are defined terms under Nevada’s Consumer Health Data Privacy Law shall have the meanings afforded to them therein.
- Purposes & Manner of Processing. We collect, use, process, and share consumer health data for the purposes and in the manners described in our Consumer Health Data Privacy Policy, which also provides additional disclosures relevant to Nevada consumers.
- Review & Revision of Consumer Health Data. If you would like to review and/or revise your consumer health data, you may submit a request to us via the methods listed in our Consumer Health Data Privacy Policy. We will respond to your requests to exercise your rights in accordance with applicable law, but in any case, no later than 45 days after receiving your request. We may extend this period up to 45 days only where doing so is permitted under applicable law.
- Changes to this Supplement. We will notify you before making any changes to our privacy practices with respect to your consumer health data by posting an updated notice on this page, with an updated effective date.
- Third Party Collection of Consumer Health Data. Please note that some third parties may collect consumer health data about you over time and across different websites or online services you may visit.