White Guide and Orange Guide Formatting Project - Pfizer

Orange Guide – Chapter 8: Privacy: Protecting Personal Information
cost-free mechanism (toll-free number or prepaid mail-in form) must also be provided that allows the
consumer to discontinue or “opt-out” of the program at any time.
These guidelines apply to all Pfizer personnel, including disease management teams and non-branded
teams. In addition, they also must be communicated to and followed by any Pfizer-approved vendors
undertaking such activities on behalf of Pfizer.
Handling HCP Personal Data
Restricting Access to Personal Information to a “Need to Know” Basis
As a general policy, Pfizer restricts access to sensitive information to individuals who “need to know”
the information. In general, most Pfizer colleagues, including Sales Colleagues, do not need access to
Personal Information about HCPs for any reason and should not request, collect or retain any such
information. This type of information includes, but is not limited to:
Social Security or other government-issued numbers;
Driver’s license numbers;
Health insurance identification numbers;
Credit card, debit card, bank account numbers, or any other financial account identifiers
(with or without associated security numbers);
Employment identification numbers; and
Biometric data (fingerprints, voiceprints, or retinal scans).
Access to Personal Information and, in particular, collection of Personal Information imposes an
obligation to keep that information confidential and secure and inform Legal when such information is
lost or stolen. Disclosure of certain types of Personal Information, even if accidental, can expose Pfizer
to legal liability, create a risk of fraud or even identity theft for the information owner, and erode
confidence in Pfizer and its commitment to privacy and information security.
146
Rev. 09/12
Page 13 of 18