Responsibility > Policies & Disclosures

AbbVie and the U.S.-EU & U.S.-Swiss Safe Harbor Privacy Statement

AbbVie complies with the U.S.-EU Safe Harbor Framework and the U.S.-Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information of employees of AbbVie and its affiliates and subsidiaries in European Economic Area/ European Union member countries and Switzerland. AbbVie has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement with respect to this information.

To learn more, please visit:

• AbbVie Data Privacy for Non-U.S. Employee Personal Information
• Safe Harbor Program Certification

California Transparency in Supply Chains Act

AbbVie believes in being a socially responsible company and doing what is right, not just by our customers, but by the world in which we live. AbbVie is committed to safe and fair working conditions, beyond our employees and the stores in which our products are sold, but also extending to the partners in our supply chain. AbbVie will have a zero tolerance policy regarding human trafficking and slavery. AbbVie shall have a global policy against trafficking and slavery in supply chains. AbbVie will engage in verification of product supply chains to evaluate and address risks of human trafficking and slavery. The verification will be conducted by AbbVie employees in AbbVie Purchasing and Supplier Management.

AbbVie's Supplier Guidelines shall state our expectations to suppliers conducting business with AbbVie that they are prohibited from engaging in illegal behavior, including human trafficking and slavery. AbbVie's internal Code of Business Conduct will also incorporate standards prohibiting slavery/trafficking or engaging in illegal behavior. AbbVie will require direct suppliers to certify that materials incorporated into AbbVie's products comply with local and national laws of the country or countries in which they are doing business. Certifications will be also obtained from suppliers that they comply with standards as outlined in our Supplier Guidelines. AbbVie will maintain internal accountability standards and procedures for both employees and contractors failing to meet company standards regarding slavery and trafficking. In particular, AbbVie employees worldwide will train annually on AbbVie's Code of Business Conduct. Likewise, all contractors assigned to AbbVie will be required to review and abide by AbbVie's Code of Business Conduct.

Employees and contractors assigned to AbbVie who fail to abide by AbbVie's Code of Business Conduct may be subject to reprimand or other adverse consequences, up to and including termination of employment or assignment. AbbVie will provide training to its employees and management who have direct responsibility for supply chain management, regarding human trafficking and slavery, particularly with respect to mitigating risks within the supply chains of products.

California Act Declaration

AbbVie's ethics and compliance program (the "Program") reflects our commitment to compliance with the laws and regulations applicable to our business, including the California Health and Safety Code §§119400-119402 (the "California Act"). Interested parties may view the Program online or may also call 1-800-254-0462 for a copy of any of the Program materials.

In accordance with the California Act, AbbVie has established a specific annual dollar limit of $1,000, which applies to promotional materials, items, and activities provided by an employee of relevant AbbVie businesses to covered recipients in California. In addition, the following expenses are excluded from the limit: expenses of a de minimis value (i.e., with a value of $10 or less), expenses that are directly associated with payments statutorily excluded from the limit (e.g., meals for consultants), items provided to health care professionals that are ultimately intended for patients or consumers, fellowships, receptions at third party educational or professional meetings, and sales aids. To the best of its knowledge, AbbVie declares that as of January 1, 2013, it is in all material respects in compliance with the requirements of the California Act.

Data Privacy for Non-U.S. Employee Personal Information

Effective by date: January 1, 2013

Approved date: January 1, 2013

1.0 Overview Section

1.1 Purpose

AbbVie (the "Company") has issued this Privacy Policy (the "Policy") to ensure that a consistently high level or protection is applied to AbbVie's collection, use and disclosure of Employee Personal Information. AbbVie complies with the U.S. – EU Safe Harbor Framework and the U.S. – Swiss Safe Harbor Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information from European Union member countries and Switzerland. AbbVie has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement. To learn more about the Safe Harbor program, and to view AbbVie's certification, please visit (www.export.gov/safeharbor).

This Policy shall facilitate AbbVie's participation in the EU-U.S. Safe Harbor Agreement, regulating transfers of Personal Information from the European Union to the United States and the transfer of Personal Information from other jurisdictions that have data privacy legislation such as Argentina and Japan. AbbVie will comply with the rules and principles arising under the Safe Harbor Program. This Policy supplements the AbbVie Privacy Principles, which establishes general standards for Processing Employee Personal Information within the Company.

1.2 Scope

This Policy specifically governs the Processing of Employee Personal Information relating to AbbVie employees ordinarily resident outside the United States, but who's Personal Information is processed by AbbVie entities within the United States (the "Employees"). The U.S. Employee Personal Data Policy applies to the Company's Processing of Employee Personal Information relating to employees resident in the United States.

1.3 Implementation

Implementation is in accordance with Effective by Date.

2.0 Definitions

Term | Definition

Term	Definition
Employee Personal Information	Personal Information pertaining to a current, past and prospective AbbVie employee processed in the context of an employment relationship with the Company.
Personal Information	Information about an identified or identifiable natural person regardless of the format in which it is displayed (paper, electronic, etc). This includes but is not limited to information available to the individual's manager and contained in an employee's personal profile (e.g., home address and phone number, work and compensation history, planned salary, earnings, career development, paid time off, salary grade, language preferences, education, emergency contacts) required by AbbVie to meet regulatory requirements (e.g., gender), or that is required to manage the employee's performance and development.
Process (or Processing)	Any operation or set of operations that are performed upon Personal Information, whether done by automatic means or otherwise. It includes collecting, recording, storing organizing, adapting, altering, retrieving, consulting, using, disclosing or making available, destroying and/or deleting Personal Information.
Sensitive Personal Information	Personal Information pertaining to an individual's race, ethnic origin, or health or other information that has been classified as such under local laws applicable to an AbbVie employee.

3.0 General Policy

3.1 Notice to Non-U.S. Employees

The Company will inform Employees through appropriate channels about the purposes for which it collects and uses their Employee Personal Information, how to contact AbbVie where they have issues or concerns about their Employee Personal Information, the types of third parties with which it shares their Personal Information, and the choice and means AbbVie offers employees for limiting the use and disclosure of their Employee Personal Information. This information will be provided as soon as practicable, and, in any event, before AbbVie uses the information for a purpose other than that for which it was originally obtained.

Among the reasons that the Company holds and may in the future collect Personal Information about Employees include the following: normal business practices related to your role and function in the company, employee management and administration generally (including both during and after employment), employment verification, administering benefits, administering personal short or long term compensation programs, conducting disciplinary proceedings, addressing labor relations issues, processing health insurance claims, and maintaining and monitoring usage of internal networks and IT systems. The Company may be required under local labor and other laws (e.g., tax, health and safety, anti-discrimination) to maintain records that can include personal information, such as government identifiers, information relating to sickness, maternity or parental leave, pension and retirement.

3.2 Choice for Employees

The Company will not Process Employee Personal Information for purposes incompatible with those given in any formal notice furnished to Employees without first informing Employees and giving them the opportunity to object to such Processing. The Company will not Process Employee Personal Information that qualifies as Sensitive Personal Information for purposes incompatible with those given in any formal notice provided to employees unless the employee in question has explicitly consented to the Processing or the Processing is:

• in the vital interests of the Employee or another person;
• necessary for the establishment of legal claims or defenses;
• required to provide medical care or diagnosis;
• necessary to carry out the Company's obligations in the field of employment law; or
• related to information that has been made public by the Employee.

3.3 Ensuring Information Integrity

The Company will Process only Employee Personal Information that is relevant taking into account the business purposes for which it is to be processed. The Company will employ reasonable means to keep Employee Personal Information accurate, complete, up-to-date and reliable for their intended use. All employees have a responsibility to assist the Company in keeping the Personal Information the Company maintains about them accurate, complete and current.

3.4 Ensuring Information Access

With limited exceptions, Employees will be permitted to review and, where inaccurate, correct Employee Personal Information that the Company holds about them by contacting a designated contact point. However, the Company may not give Employees the ability to review their Employee Personal Information when the burden or expense of doing so (including locating the Employee Personal Information) is disproportionate to the risks to their privacy in a particular case. Such cases include, but are not limited to, those where disclosure of Employee Personal Information would:

• require the disclosure of confidential commercial information and such confidential information cannot be readily separated from the Employee Person Information;
• interfere with execution or enforcement of the law, including the prevention, investigation or detection of criminal offenses or the right to a fair trial;
• interfere with private causes of action, including the prevention, investigation or detection of legal claims or the right to a fair trial;
• breach a legal or other professional privilege or obligation;
• breach the confidentiality necessary for future or ongoing negotiations, such as those involving the acquisition of companies;
• prejudice employee security investigations or grievance proceedings;
• prejudice the confidentiality necessary, for limited periods, in connection with employee succession planning and corporate re-organizations; or
• prejudice the confidentiality necessary in connection with monitoring, inspection or regulatory functions connected with the Company's sound economic or financial management.

The Company also may not give Employees the ability to review their Employee Personal Information when doing so would affect the privacy interests of other individuals and the Personal Information of those other individuals cannot be redacted. If the Company does not provide Employees the ability to review their Employee Personal Information, it will indicate the specific reasons why and provide a contact point for further inquiries. Irrespective of the limitations set forth above, the Company will comply with all applicable local regulations and ensure that Employees can review any Personal Information they have a right to access under the law applicable in their country of residence.

3.5 Transfers to Company Affiliates and Third Parties

Employee Personal Information only may be disclosed to other Company affiliates or independent third parties where required by law or legal process (including disclosures to law enforcement authorities in connection with their duties), to protect the interests of the Company and/or its employees, if there is an emergency situation involving the health and safety of an employee, where necessary for the Company to perform a contractual obligation owed to an Employee or for other lawful purposes.

Except where the disclosure is required by local law, regulation or court order or where the transfer is necessary to perform contractual obligations owed to the Employee, an Employee will be entitled to object to having their Employee Personal Information disclosed to other Company affiliates or to independent third parties. If the employee Personal Information qualifies as Sensitive Personal Information, the Company will seek affirmative consent from Employees before making such disclosures, except in cases falling within Section 3.2 of this Policy.

3.6 Transfers to Agents and Contractors

The Company may disclose Employee Personal Information to third party agents or contractors that supply services to the Company that require the Processing of that Personal Information. The Company will only transfer Personal Information where the agent or contractor has provided assurances to the Company that it will protect the Personal Information consistent with this Policy. If the Company has knowledge that an agent or contractor is Processing Personal Information in a manner contrary to this Policy, it will take all reasonable steps to prevent or stop the Processing.

3.7 Security

Appropriate administrative, technical, personal and physical measures will be used to safeguard Employee Personal Information against loss, theft, misuse, unauthorized access, modification, disclosure and destruction. The Company will restrict access to Employee Personal Information under its control to those employees, agents and contractors of the Company who have a legitimate business need for such access.

3.8 Compliance

The Company will maintain an active program to ensure compliance with this Policy. Employee and Labor Relations are responsible for implementing and overseeing the administration of this Policy. All Company employees whose responsibilities include the Processing of Employee Personal Information are required to adhere to this Policy and any implementing policies. Failure to do so may be grounds for discipline up to and including termination.

3.9 Complaint Resolution

The Company is committed to assisting employees in protecting their privacy and in providing opportunities to raise concerns about the Processing of their Employee Personal Information. Retaliation against any employee who raises a concern under this Policy is against Company policy and is strictly prohibited. Employees who have concerns about the Processing of their Employee Personal Information are encouraged to notify their local Human Resources. Any submitted complaints will be resolved in accordance with AbbVie's existing formal complaints procedures.

For AbbVie employees located in the European Union, if efforts to resolve a concern within AbbVie are unsatisfactory, employees may contact the panel of EU data protection authorities established as an independent recourse mechanism under the Safe Harbor Agreement. AbbVie will cooperate in the resolution of such inquiries and will comply with the advice given by the panel of EU data protection authorities.

For AbbVie employees located in Switzerland, if efforts to resolve a concern within AbbVie are unsatisfactory, employees may contact the Swiss Federal Data Protection and Information Commissioner established as an independent recourse mechanism under the Safe Harbor Agreement. AbbVie will cooperate in the resolution of such inquiries and will comply with the advice given by the Swiss Federal Data Protection and Information Commissioner.

California HUMIRA Sharps Program

AbbVie's HUMIRA (adalimumab) Sharps Mail-Back Program