Print

Privacy Shield

Quest Diagnostics Incorporated 
Website Privacy Shield Notice

Under the E.U.-U.S. Privacy Shield Framework
Effective December 5, 2018

This Notice is provided by Quest Diagnostics Incorporated (Quest Diagnostics) in relation to its certification to the E.U.-U.S. Privacy Shield framework.


Quest Privacy Shield Companies

The following Quest companies have certified their adherence to, and comply with, the E.U.-U.S. Privacy Shield framework as set forth by the U.S. Department of Commerce, with respect to the collection, use, and retention of personal information transferred from the European Union to the United States:

Quest Diagnostics Incorporated
500 Plaza Drive
Secaucus, NJ 07094

Quest Diagnostics Clinical Laboratories, Inc.
500 Plaza Drive
Secaucus, NJ 07094

LabOne, LLC
10101 Renner Blvd.
Lenexa, Kansas 66219

LabOne of Ohio, Inc.
6700 Steger Drive
Cincinnati, Ohio 45237

ExamOne World Wide, Inc.
10101 Renner Blvd
Lenexa, Kansas 66219

ExamOne, LLC
500 Plaza Drive
Secaucus, New Jersey 07094

ExamOne World Wide of N.J., Inc.
10101 Renner Blvd.
Lenexa, Kansas 66219

Quest Diagnostics Infectious Diseases, Inc.
33608 Ortega Highway
San Juan Capistrano, California 92675

Quest Diagnostics Nichols Institute, Inc. (California)
33608 Ortega Highway
San Juan Capistrano, California 92675

Quest Diagnostics Nichols Institute, Inc. (Virginia)
14225 Newbrook Drive
Chantilly, Virginia 20153

Quest Diagnostics Ventures LLC
500 Plaza Drive
Secaucus, New Jersey 07094

Athena Diagnostics, Inc.
200 Forest Street
Marlborough, Massachusetts 01752

MedFusion, LLC
2501 South State Hwy 121, Suite 1100
Lewisville, Texas 75067-8188

Unilab Corporation
8401 Fallbrook Avenue
West Hills, California 91304

AmeriPath, Inc.
7111 Fairway Drive, Suite 400
Palm Beach Gardens, FL 33418

Specialty Laboratories, Inc.
27027 Tourney Road
Valencia, California 91355-5386

Desert Pathology Medical Group, Inc.
1150 N Indian Canyon Drive
Palm Springs, California  92262-4872


Privacy Shield Principles

The Quest companies identified in this Notice have committed to uphold the Privacy Shield principles and surrounding requirements of the framework. The principles are: Notice; Choice (Consent); Accountability for Onward Transfer; Security; Data Integrity and Purpose Limitation; Access; and Recourse, Enforcement and Liability. For more information on the E.U.-U.S. Privacy Shield or to view our certifications, please visit https://www.privacyshield.gov/.


Scope of Individuals and Personal Data

Quest Diagnostics’ Privacy Shield certification to the U.S. Department of Commerce confirms its adherence to that framework for E.U. personal information transferred to the U.S., in relation to patients, clinical research participants, employees, former employees, beneficiaries identified by employees, job applicants, healthcare professionals, other customers, and suppliers. Quest Diagnostics limits its collection, processing and storage of personal information to situations where it has a legitimate business interest in the information.
 

Information About the Privacy Shield

The Privacy Shield framework, which is jointly established by the European Commission and the U.S. Department of Commerce, allows companies such as Quest Diagnostics to self-certify to the seven privacy principles and surrounding requirements of the framework for purposes of protecting and safeguarding personal data relating to residents of the European Union (E.U.) and European Economic Area (E.E.A.). In exchange for completing the requirements of the Privacy Shield framework, and committing to uphold those requirements, U.S.-based organizations such as Quest are declared by the European Commission to have adopted ‘adequate’ privacy and security standards for that personal data. This means that they can receive E.U. or E.E.A. personal data without first having to fulfill another cross-border data transfer method as provided under the E.U. General Data Protection Regulation (GDPR) 2016/679, but must still fulfill the surrounding data protection requirements that apply to the data, for as long as it is under their custody or control.
 

Third Party Transfers

Quest Diagnostics and its affiliates that have certified to the Privacy Shield entrust certain personal information pertaining to E.U. individuals to third-party partners who assist those companies with their business activities, or who have regulatory or legal oversight responsibilities in relation to certain business activities. Where they do so, Quest Diagnostics and its affiliates that have certified to the Privacy Shield take steps to ensure that the third parties entrusted with E.U. personal data uphold an equivalent level of protection for the data. Quest Diagnostics and its affiliates that have certified to the Privacy Shield also understand that the company can be held responsible if its business partners entrusted with E.U. personal information violate those obligations.
 

Disputes

In compliance with the Privacy Shield principles, Quest Diagnostics and its affiliates that have certified to the Privacy Shield commit to resolve complaints about its collection or use of your personal information. E.U. individuals with inquiries or complaints regarding their Privacy Shield policies or practices should first contact our Privacy Officer at: Privacy@QuestDiagnostics.com. In accordance with our Privacy Shield commitment, Quest Diagnostics has adopted dispute resolution practices that are designed to evaluate and resolve any complaints or concerns about your privacy and its collection or use of your personal information within thirty (30) days of receipt.
 

Third Party Dispute Resolution

Quest Diagnostics and its affiliates that have certified to the Privacy Shield have further committed to cooperate with the E.U. supervisory authorities with regard to unresolved Privacy Shield complaints, including those concerning human resources data transferred from the E.U. in the context of the employment relationship. If you do not receive timely acknowledgment of your complaint from Quest Diagnostics , or if the company has not addressed your complaint to your satisfaction, you have the right to contact the E.U. supervisory authorities more information or to file a complaint. The services of E.U. supervisory authorities are provided at no cost to you.
 

Regulatory Oversight and Enforcement

Quest Diagnostics and its affiliates that have certified to the Privacy Shield are also subject to investigatory and enforcement authority of the U.S. and E.U. agencies who oversee the Privacy Shield framework, namely the U.S. Federal Trade Commission and the relevant E.U. supervisory authorities. Individuals also have a right to file a complaint with these oversight agencies, particularly if you believe your complaint is not satisfactorily resolved through Quest Diagnostics.
 

Right to Binding Arbitration

In accordance with the Privacy Shield framework, E.U. individuals may be able to invoke binding arbitration before a Privacy Shield Panel if they believe that their claim has not been handled by the company in a satisfactory manner.
 

Rights of Individuals to Access Their Data

E.U. individuals have the right to access personal information about them, and to limit use and disclosure of their personal information. With its Privacy Shield certification, Quest Diagnostics and its affiliates that have certified to the Privacy Shield have committed to respect and uphold those rights. Should you wish to exercise those rights, the company requests that you contact us at: Privacy@QuestDiagnostics.com. You may also write to us at: Quest Diagnostics Incorporated, Attention: Privacy Officer, 500 Plaza Drive, Secaucus, New Jersey 07094 USA. Please note that there are certain limitations on these rights, as described in the Privacy Shield framework.
 

Law Enforcement Requests

Quest Diagnostics and its affiliates that have certified to the Privacy Shield are required to disclose personal information in response to lawful requests by public authorities, including compliance with national security or law enforcement requirements.
 

Conflicts

If there is any conflict between the terms in this privacy policy and the Privacy Shield principles, the Privacy Shield principles will govern.