- Kind
- Listing
- Issued or listed
- 22 Mar 2017
- Expires or valid through
- 4 Sep 2027
- Scope
- LectureLinx (“LectureLinx, Inc.” and/or “LectureLinx EU, Ltd”) provides technology-enabled services and software solutions to pharmaceutical and life sciences organizations to support healthcare professional (“HCP”) and healthcare organization (“HCO”) engagement, contracting, credentialing, fair market value (“FMV”) assessment, training, payment processing, compliance, and related business activities.
In providing these services, LectureLinx may receive and process personal data from clients, healthcare professionals, healthcare organizations, and authorized users in connection with the delivery of its contracted services.
Types of Personal Data Processed
Depending on the services provided to a client, personal data processed by LectureLinx may include:
• Business contact information, such as name, business email address, telephone number, employer, professional address, and job title;
• Professional information relating to HCPs and other individuals, such as specialty, professional qualifications, credentials, licenses, affiliations, curriculum vitae information, and other information required to assess qualifications or engagement eligibility;
• Information associated with HCP/HCO engagements, including contracting, training, FMV/tiering, engagement history, payment and expense information, and information required for transparency or aggregate-spend reporting;
• Financial or payment-related information necessary to facilitate payments to individuals or organizations;
• User account and system-access information for individuals authorized to use LectureLinx platforms; and
• Limited employee, contractor, or business contact information where necessary to support LectureLinx's business operations and client relationships.
Purposes of Processing
LectureLinx processes personal data primarily to provide contracted technology and operational services to pharmaceutical and life sciences clients. Depending on the services purchased, processing may include establishing and administering user accounts; conducting HCP/HCO onboarding, credentialing, due diligence, and FMV/tiering activities; facilitating contracting and training; managing engagement-related information; processing or facilitating payments; supporting transparency and aggregate-spend reporting; providing client reporting and audit support; maintaining records required for compliance purposes; providing technical and customer support; and maintaining the security and integrity of LectureLinx systems and services.
LectureLinx generally processes this information on behalf of and at the direction of its clients and in accordance with applicable contractual requirements, data protection obligations, and internal privacy and information-security policies.
How Personal Data Is Processed and Protected
Personal data is processed through LectureLinx's secure technology platforms and associated operational processes. Access to personal data is restricted to authorized personnel based on defined roles, responsibilities, and legitimate business need.
LectureLinx maintains administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse. These safeguards include access controls, security monitoring, documented policies and procedures, employee security awareness, incident response processes, vendor management, business continuity practices, and other controls appropriate to the nature of the information processed.
LectureLinx maintains a SOC 2 Type 2 compliance program, under which the design and operating effectiveness of relevant controls are independently assessed over a defined review period. The SOC 2 Type 2 assessment provides independent assurance regarding the operation of controls supporting the security and protection of systems and information used in delivering LectureLinx services.
Personal data is retained in accordance with applicable contractual, legal, regulatory, and business requirements and is securely deleted or otherwise disposed of in accordance with established retention practices.
Disclosure to Third Parties
LectureLinx may disclose personal data to the pharmaceutical or life sciences client on whose behalf the information is being processed and, where necessary to provide contracted services, to authorized service providers and subprocessors that support activities such as technology hosting, system operations, communications, payment processing, professional services, security, and other business functions.
Third-party access is limited to information necessary to perform the applicable services and is subject to appropriate contractual confidentiality, privacy, security, and data-protection requirements. LectureLinx also maintains vendor-management processes designed to assess and manage risks associated with third-party service providers.
LectureLinx does not disclose personal data to third parties for their independent marketing purposes.