Cook Group Incorporated’s Website Notice of Certification Under the Data Privacy Framework

Effective January 2026

This website notice of certification to the Data Privacy Framework is intended to inform you about the specific Cook Group companies that have certified their adherence to, and comply with, one or all of the data privacy frameworks as set forth by the US Department of Commerce, with respect to the processing of personal information received from the European Union and the United Kingdom in reliance on the EU-US Data Protection Framework and the UK Extension to the EU-US Data Privacy Framework, and with respect to the processing of personal data received from Switzerland in reliance on the Swiss-US Data Privacy Framework principles.

The following Cook Group companies have certified their compliance as described:.

For ease of reference, these companies are collectively referred to as the “Cook Data Privacy Framework Companies” in this Website Notice. For additional information about these data privacy frameworks, or to view data privacy framework certifications of the Cook Data Privacy Framework Companies on file with the US Department of Commerce, please visit https://www.dataprivacyframework.gov/s/.

Scope

The Cook Data Privacy Framework Companies have filed certifications with the US Department of Commerce confirming their adherence to the data privacy framework(s) for EU and UK personal information transferred to the US, and as applicable, for Swiss personal information transferred to the US, in relation to the following types of personal information: clinical research, patients, human resources, customers, and suppliers. The Cook Data Privacy Framework Companies limit their collection, processing, and storage of that personal information to situations where they have a legitimate business interest in the information. For more information on purposes for which the Cook Data Privacy Framework Companies collect and use personal data, please see the Privacy Statement.

You also have the right to access your personal information as well as limiting its use and disclosure. Please see the Privacy Statement for more information about how to exercise these rights in relation to the Cook Data Privacy Framework Companies.

Third-party transfers

In certain situations, the Cook Data Privacy Framework Companies entrust personal information pertaining to EU, UK, and Swiss individuals to third-party partners who assist those companies with their business activities, or who have regulatory or legal oversight responsibilities in relation to certain business activities. The third parties may include, for example, research recruitment partners; research sites; ethics committees; investigational review boards; IT security partners; auditors; health authorities; business partners assisting with patient data such as in relation to patient registries, signal detection, adverse event reporting, quality improvement, custom device manufacturing and regulatory oversight; organizations assisting with recruitment or human resource activities relating to active or retired personnel, such as those assisting with job applicant websites, immigration, pensions, or other benefits; those assisting in the customer context, such as medical professionals and their staff members who interact with the Cook Data Privacy Framework Companies in relation to the medical devices that Cook Group develops; advertising and marketing partners; and those assisting in the supplier context, such as third parties that provide equipment, services, or other materials to the Cook Data Privacy Framework Companies in connection with their business activities. The Cook Data Privacy Framework Companies take steps to ensure that the third parties entrusted with personal information uphold an equivalent level of protection for the data as required under the data privacy frameworks. The Cook Data Privacy Framework Companies also understand that they can be held responsible if their business partners entrusted with EU, UK, and Swiss personal information violate those obligations.

Disputes

In compliance with the data privacy frameworks’ principles, the Cook Data Privacy Framework Companies commit to resolve complaints about their collection or use of personal information. EU, UK, and Swiss individuals with inquiries or complaints regarding the data privacy framework policies or practices should first contact us at: