Privacy Policy

X. California Residents’ Privacy Rights

If You are a resident of California, You have certain rights under the California Consumer Privacy Act of 2018 (CCPA), as amended and expanded by the California Privacy Rights Act of 2020 (CPRA), to exercise free of charge. We honor those rights, as described below.

A. Disclosure of PII We Collect About You.

On receipt of a verifiable request from You, You have the right to know the PII we collected about You, including:

• The categories of PII we have collected about You, including Sensitive Personal Information;
• The categories of sources from which the PII is collected;
• Our business or commercial purpose for collecting, selling, or sharing PII, if applicable;
• The categories of third parties (excluding service providers and contractors) to whom we disclose PII, if any; and
• The specific pieces of PII we have collected about You.

Please note that we are not required to provide the PII to You more than twice in a 12-month period.

B. Disclosure of PII Sold, Shared, or Disclosed for a Business Purpose.

In connection with any PII we may sell or share with a third party, if any, or disclose for a business purpose, if any, on receipt of a verifiable request from You, You have the right to know:

• The categories of PII about You that we sold or shared and the categories of third parties (excluding service providers and contractors) to whom the PII was sold or shared, if any; and
• The categories of PII that we disclosed about You for a business purpose and the categories of persons to whom the PII was disclosed for a business purpose, if any.

In the preceding 12 months, Insmed has not sold or shared your PII.

In the preceding 12 months, for the purposes and reasons identified in Section III, above, we have disclosed to our service providers and affiliates Identifiers, Personal Information, Commercial information, Internet or other similar network activity, Geolocation data, Professional or employment related information, characteristics of protected classifications under applicable law, and Inferences drawn from other PII subject to applicable law.

C. Right to Opt-Out of the Sale or Sharing of Personal Information.

You have the right to opt-out of the sale or sharing of Your PII, if applicable.

Do Not Sell or Share My Personal Information

D. Right to Deletion.

Subject to certain exceptions set out below, on receipt of a verifiable request from You, we will:

• Delete Your PII from our records;
• Notify any service providers or contractors to delete Your PII from their records; and
• Notify third parties to whom we sold or shared Your PII, if any, to delete Your PII unless this proves impossible or involves disproportionate effort.

Please note that we may not delete Your PII if it is necessary to:

• Complete the transaction for which the PII was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by You, or reasonably anticipated by You within the context of our ongoing business relationship with You, or otherwise perform a contract between You and us.
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity. Help to ensure security and integrity to the extent the use of Your PII is reasonably necessary and proportionate for those purposes.
• Debug to identify and repair errors that impair existing intended functionality.
• Exercise free speech, ensure the right of another consumer to exercise that consumer’s right of free speech, or exercise another right provided for by law.
• Comply with the California Electronic Communications Privacy Act.
• Engage in public or peer reviewed scientific, historical, or statistical research in the public interest that conforms or adheres to all other applicable ethics and privacy laws, when our deletion of the information is likely to render impossible or seriously impair the achievement of ability to complete such research, provided we have obtained Your informed consent.
• To enable solely internal uses that are reasonably aligned with Your expectations based on Your relationship with us and compatible with the context in which You provided the information.
• Comply with a legal obligation.

E. Right to Correction.

You have the right to request correction of inaccurate PII maintained by us about you. Upon receipt of a verifiable request from you, we will use commercially reasonable efforts to correct the inaccurate PII.

We may request documentation from you to determine the accuracy of the information we have maintained. If you provide us documentation either upon our request or through your own initiative, that documentation will only be used or maintained by us for the purpose of correcting your PII and complying with our recordkeeping requirements under the CCPA/CPRA.

We may deny your request if we have previously denied your same request to correct an alleged inaccuracy in the past six (6) months unless you provide new or additional documentation that the information at issue is inaccurate. As an alternative to correction, we may delete the inaccurate information if it does not negatively impact you or if you consent to this deletion. We reserve the right to deny a request if allowed under law, or if we determine that the contested information is more likely than not accurate, based on the totality of circumstances.

F. Protection Against Discrimination.

You have the right to not be discriminated against by us because You exercised any of Your rights under the CCPA/CPRA. This means we cannot, among other things:

• Deny goods or services to You;
• Charge different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties;
• Provide a different level or quality of goods or services to You;
• Suggest that you will receive a different price or rate for goods or services or a different level or quality of goods or services; or
• Retaliating against an employee, applicant for employment, or independent contractor for exercising their rights.

G. How to Submit a Verifiable Request to Know, Delete, or Correct.

You may submit a request to us by either:

• Calling us at our Privacy Rights toll-free number:  1-844-4-INSMED (1-844-446-7633)
• Sending us an email at privacy@insmed.com
• Mailing Your request to:
  Insmed Incorporated
  700 US Highway 202/206
  Bridgewater, NJ 08807
  Attention: General Counsel
  Tel: (908) 977-9900

You may make a request on Your own behalf, and if You are the parent or guardian of a minor child, You also may make a request related to Your child’s PII. 

If You wish to designate an authorized agent to make a request on Your behalf, please provide us with 1) a signed declaration stating that Your intent is to permit that individual to act on Your behalf and include such individual’s full name, address, email address, and phone number, and 2) Your authorized agent must provide proof that You gave the agent signed permission to submit the request and You must confirm the same with us; or Your authorized agent may provide us with a power of attorney pursuant to California Probate Code section 4121 to 4130. That way we will be sure You have fully authorized us to act in accordance with the requests of that individual.

To process a request and to protect Your PII from unauthorized disclosure or deletion at the request of someone other than You or your legal representative, Insmed must verify that the person requesting information, correction, or deletion is the person about whom the request relates. To verify Your identity, if You do not have any type of account with us, we may request up to three data elements about You to compare against our records, together with a signed declaration under penalty of perjury that You are the consumer whose PII is the subject of the request. We cannot respond to Your request or provide You with information if we cannot verify Your identity.

Making a verifiable consumer request does not require You to create an account with us. We will only use information provided in Your request to verify Your identity and process Your request.

Insmed reserves the right to take additional steps as necessary to verify Your identity where we have reason to believe a request is fraudulent. You may be required to submit documentation in support of a request to correct.

We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 additional days), we will inform You of the reason and extension period in writing.

If You have any questions or concerns about our Privacy Policy or our practices regarding the collection, use, disclosure, sale, sharing, and retention of Your PII, You may contact us by

• Sending us an email at privacy@insmed.com; or
• Mailing us at:
  Insmed Incorporated
  700 US Highway 202/206
  Bridgewater, NJ 08807
  Attention: General Counsel
  Tel: (908) 977-9900