Resources: 

As stated in the terms and conditions of the Accu-Chek Care platform, Roche will act as a data processor for the healthcare organization (data controller). To ensure compliance, Roche created a Data Processing Agreement that stipulates how Roche  processes data on behalf of the data controller. The agreement includes the following:

• Data is stored and processed in the USA via AWS.
• An overview of personal and sensitive personal data processed
• Technical and organizational measures taken to protect data, such as encryption, physical access controls, correction, restriction, and erasure of personal data as required by law
• Contact information for the Data Protection Officer at Roche
• Information about Roche’s sub-contracting agreement with Accenture for data hosting
• Details regarding the supervisory power of the customer (data controller), such as rights to audit
• Reporting in case of an incident
• Roche is aware the platform may need to undergo a Data Privacy Impact Assessment. Please contact our customer support team at 1-800-628-3346 for assistance.