Privacy statement

ICON plc (formerly PRA Health Sciences), located at Van Swietenlaan 6, 9728 NZ Groningen, is responsible for the processing of personal data as set out in this privacy statement.

On this page you can read which data ICON processes and what ICON does with this data.

Personal data that we process

ICON only collects the data that is necessary for your registration for and participation in drug research. ICON processes your personal data because you use our services and because you have provided this data to us yourself when you registered for participation in a drug study or during correspondence or by telephone. We ask for your explicit consent to process your personal data. You can revoke this consent at any time.

Below you will find an overview of the personal data that we process when you register and during (potential) participation in drug research:

  • first and last name
  • gender
  • date of birth
  • address details
  • phone number
  • email address
  • bank account number
  • other personal data that you actively provide by filling in the registration form for participation in drug research, in correspondence and by telephone, insofar as it is necessary for ICON to process this data. 
Special personal data that we process in the context of participating in a drug trial

ICON processes the following special and/or sensitive personal data about you:

  • data about your height and weight
  • data about your health
  • data on race and ethnic origin
  • genetic data
  • data about your habits such as smoking and drinking
  • a photo of your face
  • citizen service number (BSN)
For what purpose and on what basis we process personal data

ICON processes the personal data you provide for the following purposes:

  • for performing drug research for which you have registered with ICON.
  • for sending our newsletters and updates about our drug research via email or SMS.
  • to tailor communication and marketing to your personal preferences.
  • to be able to contact you if this is necessary for your registration and participation in drug research.
  • to inform you about changes to our services.

The basis for the aforementioned processing is the explicit consent you have given in the context of the agreement with ICON. This consent can be revoked at any time.

ICON also processes personal data if we are legally obliged to do so, such as data that we must provide to the tax authorities for your tax return.

Retention period for personal data

ICON does not store your data longer than is necessary for the purpose of the processing. The retention of personal data may be necessary to properly perform our duties or to comply with legal obligations. ICON stores the data provided by you and the data obtained during the medical screening and drug research in its own databases for at least 25 years.

The data obtained by means of cookies and comparable techniques are kept for a shorter period of time. You can find more information about this later in this privacy statement.

Automated decision-making

ICON does not make decisions based on automated processing about matters that can have (significant) consequences for people. This concerns decisions that are taken by computer programs or systems, without involving a person (for example an ICON employee).

Sharing personal data with third parties

ICON does not sell your data to third parties and will only provide it if this is necessary for the execution of our agreement with you or to comply with a legal obligation. In the case of companies that process your data on our behalf, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. ICON remains responsible for these processing operations.

Transfer of personal data to third countries

Your data is stored on a server located abroad (United States). For the transfer of the data, ICON makes use of provisions established for this purpose within ICON. It also incorporates the standard data protection provisions adopted by the European Commission.

Cookies, or similar techniques, that we use

ICON uses functional, analytical and tracking cookies for our websites. A cookie is a small text file that is stored in the browser of your computer, tablet or smartphone when you first visit this website. ICON uses cookies with a purely technical functionality. These ensure that the website works properly and that, for example, your preferred settings are remembered. These cookies are also used to make the website work properly and to be able to optimize it. We also place cookies that keep track of your surfing habits so that we can offer customized content and advertisements.

If you don’t want non-essential cookies to be placed on your device, then you can easily accept or reject them in the cookie banners. Cookies are also placed on our website by third parties. These are necessary, for example, for the proper functioning of the website, for advertisers and/or the social media companies.

An overview of cookies can be found here.

Third-party cookies

It is possible that some cookies on our website are not related to us or are not controlled by us. When you visit a page that includes content from, for example, YouTube or Facebook, these service providers can place their own cookies on your web browser. We have no control over the use of these cookies and cannot access them due to the way cookies work, as only the party that originally placed the cookies can access those cookies.

Viewing, modifying or removing data

You have the right to view, correct or delete your personal data. In addition, you have the right to withdraw your consent to the data processing. You also have the right to data portability. This means that you can submit a request to us to send the personal data that we process about you in a computer file to you or another organization specified by you.

To exercise your rights outlined above please follow this link and complete the Data Subject Rights form or contact us at the address provided below. 

We may request proof of identification to verify your identity. This is to protect your privacy. We will respond to your request within one month.

ICON would also like to point out that you have the opportunity to file a complaint with our Global Data Protection Officer and/or your national supervisory authority. Contact details of data protection authorities from around the world can be found at https://pdpecho.com.

Questions, comments or requests

Questions, comments or requests can be submitted to the ICON Global Data Protection Officer as follows:

By Mail:

Global Data Protection Officer
ICON plc South County Business Park
Dublin 18
D18 X5R3

By Email:  Data_Privacy_Officer@iconplc.com

How do we protect personal data

ICON takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorized access, unwanted disclosure and unauthorized modification. ICON has taken the following measures to protect your personal data:

  • TLS (formerly SSL). We send your data via a secure Internet connection. You can see this by the address bar 'https' and the padlock in the address bar. TLS stands for Transport Layer Security, an encryption protocol for the authentication and security of data sent over the Internet.
  • DNSSEC. This provides the DNS records with a digital signature, so that the requester can check whether the record that comes back is authentic. This means that DNS spoofing, or so-called cache poisoning, is no longer possible.
  • ICON databases that contain personal data have secure access. The data in these databases is only accessible to persons authorized to do so by ICON.


Version 1.11 - 07 March 2023