Last Updated: March 11, 2026

Legend Biotech USA Inc. and its affiliates (“Legend Biotech,” “we,” “our,” and/or “us”) value the privacy of individuals who use our websites (including https://legendbiotech.com), applications, and services that link to this Privacy Notice. This Privacy Notice (the “Privacy Notice”) explains how we collect, store, use, share, transfer, delete and otherwise process information collected from or about users of our Services (“Users”) known as Personal Data (defined below) when you access or use our Services or otherwise engage with us as set forth in more detail below.

Legend Biotech is the “controller” of this information (i.e., entity responsible for data collection and use) under applicable laws. Legend Biotech has affiliated legal entities in certain countries that may be responsible for the Personal Information that they process, and we process Personal Information in accordance with those laws. Beyond this Privacy Notice, your use of our Services is also subject to our Terms of Service.

Please review our Supplemental Privacy Notice for information regarding Legend Biotech’s privacy practices regarding US state privacy laws, including the California Consumer Privacy Act.

Purpose of this Privacy Notice

This Privacy Notice describes the types of Personal Information, as defined below, that Legend Biotech may collect or process, how we may use and disclose that Personal Information, and how you may exercise any rights you may have regarding our processing of your Personal Information:

• Through online activities and Services that we offer (through this and other of our websites, web surveys, newsletters, applications, email, online messaging services or channels, which may include online “chats” with live individuals and artificial intelligence, through social media, through our telephone customer service centers, through email or SMS/text messages, and otherwise) (“Services”);
• Through our products and services, whether provided directly to you or your patient, or if you are a patient, through your doctor, hospital, medical treatment facility, or other healthcare provider (“Healthcare Provider”);
• In other situations where you interact with us, including but not limited to interacting with us by visiting our sites or offices or attending our events (such as tradeshows and conferences) (“Events”) (our Services, products, and Events are collectively called Services in this Privacy Notice);
• Related to activities we undertake in recruiting participants for participation in clinical trials or activities related to identifying and contracting with study investigators and their staff;
• In connection with adverse events, complaints, and reports;
• When you interact with us in a professional capacity, for example, if you are a Healthcare Provider or an employee of a company we do business with or provide Services to;
• When we undertake employment recruiting activities; or
• Anywhere this Privacy Notice is posted or referenced by Legend Biotech.

Legend Biotech may provide you with a different privacy notice in certain specific situations, in which case that privacy notice or policy will apply to the information collected or processed in that specific situation, rather than this one.

If you provide us with Personal Information related to anyone other than yourself (such as a patient or family member), please note that you are responsible for complying with all privacy and data protection laws prior to providing that information to Legend Biotech (including collecting consent, if required).

Please review this Privacy Notice carefully. To the extent permitted by law, by providing us your Personal Information or otherwise interacting with us, you are agreeing to this Privacy Notice. If you do not agree with our policies and practices, you are not permitted to use our Services or otherwise engage with us.

Clinical Study Candidates

We may process your Personal Information to determine whether you qualify for or would be interested in participating in a clinical trial and when you have been identified as a potential candidate for clinical studies sponsored by us.

Third Parties

Our Services may contain links to other websites, products, or services that we do not own or operate. We are not responsible for the privacy and advertising practices of these third parties. Please be aware that this Privacy Notice does not apply to your activities on these third-party services or any Personal information you disclose to these third parties. We encourage you to read their privacy policies before providing any Personal Information to them.

Personal Information We Collect and Process

What is Personal Information?

“Personal Information,” also known as Personal Data, is any information—as electronically or otherwise recorded—that can be used to identify a person or that we can link to or associate with a specific individual, such as a name, address, email address, or telephone number.  Personal Information in some countries can include information that indirectly identifies a person, even absent other identifying information.

Personal Information may include information considered sensitive in some countries, such as biometric information, genetic information, health information, financial account information, specific geolocation, ethnic or racial origin, information concerning your sex life or your sexual orientation, social security number, driver’s license number, state identification card number, passport number, and other similar information. 

We will process any Personal Information that we collect in accordance with applicable law and as described in this Privacy Notice (unless, as explained in this Privacy Notice, a separate policy or notice governs).  In some circumstances, if you do not provide us with certain Personal Information, there may be some Services that are unavailable to you.

We may collect a variety of Personal Information from or about you or your devices from various sources, as described below.

A. Information You Provide to Us

Contact Information and Personal Details. If you contact us directly, we may receive Personal Information about you. For example, when you contact us for support, we will receive your name, email address, the contents of your message, and your phone number if you choose to provide it. If you subscribe to our marketing communications, we will receive your name and email address.

Careers. If you decide to apply for a job with us, you may submit your contact information and your resume online. We will collect the Personal Information that you choose to provide us as part of your job application, such as your contact information, education, and employment experience. If you apply for a job with us through a third-party platform (such as LinkedIn), we will collect the Personal Information that you make available to us through such third-party platform.

Sensitive Information. Unless we specifically request or invite it, we ask that you not send us, and you not disclose, any sensitive Personal Information (e.g., Social Security numbers, information related to racial or ethnic origin, political opinions, religion or philosophical beliefs, health, sex life or sexual orientation, criminal background, or trade union membership, or biometric or genetic data for the purpose of uniquely identifying an individual) on or through the Services or otherwise to us.

B. Information We Collect When You Use Our Services

Online Identifiers and Location Information. When you use our Services and interact with us, we may process information related to your Internet protocol address or infer your general location information. For example, your IP address may indicate your general geographic region. We may use IP addresses for purposes such as calculating Services usage levels, diagnosing server problems, and administering the Services. We may also use IP addresses to communicate with or block access by visitors who fail to comply with our Terms of Use.

Device Information. When you use our services, we receive information about the device and software you use to access our Services, including internet protocol (IP) address, device type, and operating system version.

Usage Information. To help us understand how you use our Services and to help us improve them, we automatically receive information about your interactions with them, such as the length of time you spend on a page, objects you click on, and the dates, times, and lengths of your sessions. When we send you emails, we may track whether you open them to learn how to deliver better customer experience.

Diagnostic Information. Diagnostic information may be contained in log files, event files, and other trace and diagnostic files, which helps us to provide support and maintain the integrity of our Online Services.

Analytics Information. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/ and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

Information from Cookies and Similar Technologies. We and our third-party partners may collect information using cookies, pixel tags, or similar technologies. Our third-party partners, such as analytics partners, may use these technologies to collect information about your online activities over time and across different services. Cookies are small text files containing a string of alphanumeric characters. We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services. You have the option to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you may not be able to sign in or use other interactive features of our Services that depend on cookies. For more information on how to manage cookies, please see “Your Rights and Choices” below.

C. Categories of Personal Information We Receive from Third Parties

We may receive Personal Information about you from third parties such as data or marketing partners and combine it with other Personal Information we have about you.

How We Use the Personal Information We Collect

We use the Personal Information that we collect for the following business purposes:

• To provide, maintain, improve, and enhance our Services;
• To communicate with you, provide you with updates and other information relating to our Site, provide information that you request, respond to comments and questions, and otherwise provide support;
• To process job applications;
• To find and prevent fraud, and respond to trust and safety issues that may arise;
• For compliance purposes, including enforcing our Legal Notice and other legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency; and
• For other purposes for which we provide specific notice at the time the Personal Information is collected.

Legal Bases for Processing Personal Information

In certain jurisdictions around the world (e.g., European Economic Area), we process your Personal Information based on a recognized “legal basis,” such as one or more of the following:

• Consent. You have consented to the use of your Personal Information, for example to use cookies on the Services or to receive marketing communications.
• Contractual necessity. We need your Personal Information to provide you with the Services.
• Compliance with a legal or regulatory obligation or defend our legal claims and rights. We have a legal obligation to use your Personal Information, for example to comply with tax and accounting obligations.
• Legitimate interests. We or a third party have a legitimate interest in using your Personal Information. In particular, we have a legitimate interest in using your Personal Information for product development and internal analytics purposes, and otherwise to improve the safety, security, and performance of our Services. We only rely on our or a third party’s legitimate interests to process your Personal Information when these interests are not overridden by your rights and interests.
• Medical diagnosis or to provide healthcare or treatment.
• Public interest. We may use your Personal Information to protect vital interests or in the public interest.
• Public health. We may use your Personal Information for reasons of public health, including ensuring high standards of quality and safety of healthcare and medicinal products.
• Research. We may use your Personal Information for scientific research purposes. For clinical studies, please see the Clinical Study Candidates section of this Privacy Notice.

How We Share the Personal Information We Collect

We do not share or otherwise disclose Personal Information we collect from or about you to third parties, except as described below or otherwise described to you at the time of the collection.

Affiliates. We may share Personal Information we receive with our affiliates for any of the purposes described in this Privacy Notice.

Vendors and Service Providers. We may share any Personal Information we receive with vendors and service providers retained in connection with the provision of our Services.

Marketing Partners. Where we have appropriate permission to do so, we may share your Personal Information with third party marketing partners consistent with your consent. We do not sell Personal Information about you with nonaffiliated companies.

Analytics Partners. We use analytics services such as Google Analytics to collect and process certain analytics data. These services may also collect information about your use of other websites, apps, and online resources. You can learn about Google’s practices by going to https://www.google.com/policies/privacy/partners/ and opt-out of them by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/gaoptout.

As Required by Law and Similar Disclosures. We may access, preserve, and disclose your Personal Information if we believe doing so is required or appropriate to: (a) comply with law enforcement requests and legal process, such as a court order or subpoena; (b) respond to your requests; or (c) protect your, our, or others’ rights, property, or safety.

Merger, Sale, or Other Asset Transfers. We may transfer your Personal Information to service providers, advisors, potential transactional partners, or other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell, liquidate, or transfer all or a portion of our assets.

Consent. We may also disclose your Personal Information with your permission.

Your Rights and Choices

If you are a resident of a state in where a comprehensive privacy law has been enacted, you may have various choices with respect to the collection of and our use of the Personal Data we collect from you on or through the Services. Please review our Supplemental Privacy Notice.

California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of Personal Information to other entities for their direct marketing purposes in the preceding calendar year. To make such a request, please send an email to privacy@legendbiotech.com with the subject “Shine the Light Request.”

Please note that you may choose not to provide your Personal Information to us; however, in doing so, there may be some Services that are unavailable to you.

Marketing Communications. You can unsubscribe from our promotional emails via the link provided in the emails. Even if you opt out of receiving promotional messages from us, you will continue to receive administrative messages from us.

Cookies and Other Tracking Technologies. You can set your browser to refuse all or some browser cookies or other tracking technology files, or to alert you when these files are being sent. If you disable or refuse cookies or similar tracking files, some Services features may be inaccessible or not function properly. Some browsers include a “Do Not Track” (DNT) setting that can send a signal to the online services you visit indicating you do not wish to be tracked. As of the effective date of this Privacy Notice, our Services do not support such “Do Not Track” requests. You may find more information on this in our Cookie Policy.

Depending on where you live, you may have the following rights with respect to some or all of your Personal Information:

• To request information about whether, and how, we process your Personal Information
• To request access to and a copy of your Personal Information, including to provide your Personal Information directly to another organization (called, in some locations, a right to data portability)
• To request that we correct or update your Personal Information
• To request that we delete your Personal Information
• To request that we restrict or block or to object to, opt-out of, or withdraw consent with respect to the processing of your Personal Information, including your sensitive Personal Information
• To appeal the denial of a request; and
• To lodge a complaint with the data protection authority in your jurisdiction.

Please review our Supplemental Privacy Notice for additional information regarding data subject rights under certain US state privacy laws, including the California Consumer Privacy Act.

You may exercise these rights by contacting us using the contact details at the end of this Privacy Notice. In the event you wish to make a complaint about how we process your Personal Information or to appeal the denial of one of your requests, please contact us.  Even if you make a complaint to us, you may always lodge a complaint with the relevant privacy or data protection authority in your location.

We will not discriminate against you for exercising any of the rights described above, although we may not be able to continue to provide you with certain Services or it may otherwise affect the way we are able to interact with you. 

We will make reasonable efforts to respond promptly to your requests.  We may, after receiving your request, require additional information from you to honor your request and verify your identity.  Please be aware that we may be unable to afford these rights to you under certain circumstances, such as if we are legally prevented from doing so. While any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain information for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

When we receive your Personal Information from others, including your Healthcare Provider, and process your Personal Information on their behalf, we may do so at their request and subject to their instructions. In that case, we do not have control over their privacy and security practices and processes. If your Personal Information has been submitted to us by a third party, we may need to ask you to contact them directly or we may be able to contact them on your behalf. If we need you to contact them directly, we will let you know.

Retention of Personal Information

We take measures to delete your personal information or keep it in a form that does not permit identifying you when this personal information is no longer necessary for the purposes for which we process it, unless we are required by law to keep this personal information for a longer period. When determining the specific retention period, we take into account various criteria, such as the type of service provided to you, the nature and length of our relationship with you, and mandatory retention periods provided by law and the statute of limitations.

Security of Personal Information

We seek to use reasonable administrative, technical and physical safeguards and other security measures to protect your Personal Information from growing threats. However, as no electronic transmission over the internet or data storage system of Personal Information can be entirely secure, we can make no guarantees as to the security or privacy of your Personal Information. We urge you to exercise caution when transmitting Personal Information over the internet.

Cross-Border Transfers of Personal Information

Legend Biotech is a global company with offices in the United States, China, Belgium, and Ireland. Accordingly, Legend Biotech may transfer or provide access to your Personal Information to affiliates, service providers, or collaborators in these countries and others (consistent with this Privacy Notice) that do not provide the same level of protection as your own country. Where required by law, we rely on established safeguards and legal mechanisms (e.g., EU Standard Contractual Clauses) to ensure adequate protection of this information. By providing your Personal Information to us, you consent to such transfer, storage, and processing.

Special Note to Patients in the United States

If you are a patient, please note that this Privacy Notice is distinct from your Healthcare Provider’s HIPAA Notice of Privacy Practices, which describes how your Healthcare Providers use and disclose your protected health information, as well as any other privacy practices applied. 

Children’s Privacy

We do not knowingly collect, maintain, or use personal information from children under 13 years of age, and no parts of our Services are directed to children. If you learn that a child has provided us with personal information in violation of this Privacy Notice, then you may alert us at info@legendbiotech.com.

Changes to this Privacy Notice

We may update this Notice from time to time, and we will provide notice of any such changes to the Notice as required by law. The date the Privacy Notice was last updated is identified at the top of the page. We will notify you of changes to this Notice by updating the “last updated” date and posting the updated Notice on the Services. We may email or otherwise communicate reminders about this Notice, but you should check our Services periodically to see the current Notice and any changes we have made to it.

Contact Us

If you have any questions, comments, or concerns about our processing activities, please email us at privacy@legendbiotech.com or write to us at:

Legend Biotech USA Inc.
2101 Cottontail Lane
Somerset, NJ 08873, USA

732-317-5050

We will endeavor to respond to your request as soon as reasonably possible in compliance with applicable laws. To protect your privacy and security, we take reasonable steps to verify your identity before granting access or making corrections. Note that despite any requested removal of or change to your information there may be residual information that will remain within our databases and other records.

Legend Biotech Affiliates and List of Legend Biotech Controllers

Below is the list of companies that are currently affiliated with or owned by Legend Biotech, and these companies may be responsible for processing your Personal Information pursuant to this Privacy Notice: