Quest Diagnostics Incorporated
Website Privacy Shield Notice
Under the EU-US Privacy Shield Framework
Policy Issued: December 5, 2018
Policy Last Revised: January 14, 2021
This Notice is provided by Quest Diagnostics Incorporated (Quest Diagnostics) in relation to its certification to the EU-US Privacy Shield framework.
Quest Privacy Shield Companies
Quest Diagnostics Incorporated and the following affiliated companies have certified their adherence to the EU-US Privacy Shield framework. For purposes of this Notice, these companies are collectively referred to as Quest.
Quest continues to comply with the Privacy Shield framework, but will no longer rely on it as a legal basis for transfers of personal data in light of the Schrems II decision. As of July 16, 2020, Quest will instead rely on other available transfer mechanisms, such as Standard Contractual Clauses and supplementary measures, as appropriate.
Quest Diagnostics Clinical Laboratories, Inc.
500 Plaza Drive
Secaucus, NJ 07094
LabOne, LLC
10101 Renner Blvd.
Lenexa, Kansas 66219
LabOne of Ohio, Inc.
6700 Steger Drive
Cincinnati, Ohio 45237
ExamOne World Wide, Inc.
10101 Renner Blvd
Lenexa, Kansas 66219
ExamOne, LLC
500 Plaza Drive
Secaucus, New Jersey 07094
ExamOne World Wide of N.J., Inc.
10101 Renner Blvd.
Lenexa, Kansas 66219
Quest Diagnostics Infectious Diseases, Inc.
33608 Ortega Highway
San Juan Capistrano, California 92675
Quest Diagnostics Nichols Institute, Inc. (California)
33608 Ortega Highway
San Juan Capistrano, California 92675
Quest Diagnostics Nichols Institute, Inc. (Virginia)
14225 Newbrook Drive
Chantilly, Virginia 20153
Quest Diagnostics Ventures LLC
500 Plaza Drive
Secaucus, New Jersey 07094
Athena Diagnostics, Inc.
200 Forest Street
Marlborough, Massachusetts 01752
MedFusion, LLC
2501 South State Hwy 121, Suite 1100
Lewisville, Texas 75067-8188
Unilab Corporation
8401 Fallbrook Avenue
West Hills, California 91304
AmeriPath, Inc.
7111 Fairway Drive, Suite 400
Palm Beach Gardens, FL 33418
Specialty Laboratories, Inc.
27027 Tourney Road
Valencia, California 91355-5386
Desert Pathology Medical Group, Inc.
1150 N Indian Canyon Drive
Palm Springs, California 92262-4872
PhenoPath Laboratories
551 N 34th St #100
Seattle, Washington 98103
Privacy Shield Principles
Quest has committed to uphold the Privacy Shield principles and surrounding requirements of the framework. The principles are: Notice; Choice (Consent); Accountability for Onward Transfer; Security; Data Integrity and Purpose Limitation; Access; and Recourse, Enforcement and Liability. For more information on the EU-US Privacy Shield or to view our certifications, please visit https://www.privacyshield.gov.
Scope of Individuals and Personal Data
Quest’s Privacy Shield certification encompasses personal data transferred from the EEA and UK to the US that pertains to patients, clinical research participants, employees, former employees, beneficiaries identified by employees, job applicants, healthcare professionals, other customers and suppliers.
Third-Party Transfers and Disclosures
Quest entrusts personal data to third-party partners who assist with business activities, or who have regulatory or legal oversight responsibilities in relation to certain business activities. Where it does so, Quest takes steps to ensure that the third parties entrusted with personal data uphold an equivalent level of protection for the data. Quest understands that it can be held responsible if its business partners entrusted with personal data violate those obligations.
Law Enforcement Requests
Quest Diagnostics may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
As of the date of this Notice, we have not been asked to do so and, if asked, will endeavor to notify the data exporter and/or the data subject with the exporter’s assistance. If such notice is not possible, we will seek to have restrictions on our ability to provide the notice waived. If and to the extent permissible, we will agree to share information regarding any such requests for disclosure of personal data with our data exporters.
Choices and Means to Limit Uses and Disclosures
Quest has mechanisms in place to respond to requests from individuals to limit the use and disclosure of their personal data transferred under the Privacy Shield framework. Should you wish to do so, you may contact us by email at Privacy@QuestDiagnostics.com or write to us at Quest Diagnostics Incorporated, Attention: Privacy Officer, 500 Plaza Drive, Secaucus, New Jersey 07094 USA. Please note that there are certain limitations on these rights, as described in the Privacy Shield framework.
Disputes and Independent Recourse Mechanisms
In compliance with the Privacy Shield Principles, Quest commits to resolve complaints about our collection or use of your personal data. Individuals with inquiries or complaints regarding our Privacy Shield policy should first contact Quest Diagnostics via email at: Privacy@QuestDiagnostics.com, or write to us at Quest Diagnostics Incorporated, Attention: Privacy Officer, 500 Plaza Drive, Secaucus, New Jersey 07094 USA. If you are not satisfied with our resolution of your inquiry or dispute, you may also contact the relevant data protection authority.
Quest has further committed to cooperate with the panel established by the EU data protection authorities with regard to unresolved Privacy Shield complaints concerning human resources and other data transferred from the EEA and UK to the United States.
Regulatory Oversight and Enforcement
As noted above, Quest is also subject to the investigatory and enforcement authority of the US and EU agencies that oversee the Privacy Shield framework, namely the US Federal Trade Commission and the relevant EU supervisory authorities. You have a right to file a complaint with these oversight agencies, particularly if you believe your complaint is not satisfactorily resolved through Quest.
Right to Binding Arbitration
Under certain conditions, more fully described on the Privacy Shield website at https://www.privacyshield.gov/article?id=How-to-Submit-a-Complaint, you may be able to invoke binding arbitration if other dispute resolution procedures have been exhausted.
Rights of Individuals to Access Their Data
Quest has committed to respect and uphold the rights of individuals in relation to their personal data covered under the Privacy Shield framework. Should you wish to exercise those rights, you may contact us by email at Privacy@QuestDiagnostics.com or write to us at Quest Diagnostics Incorporated, Attention: Privacy Officer, 500 Plaza Drive, Secaucus, New Jersey 07094 USA. Please note that there are certain limitations on these rights, as described in the Privacy Shield framework.
Conflicts
If there is any conflict between the terms in this Notice and the Privacy Shield principles, the Privacy Shield principles will govern.
