Data Privacy and Security Rationale Statement

Last Updated: May 1, 2026

MedPro Systems LLC (“MedPro”) collects and processes data as a data broker, managing publicly available and/or customer-provided information with no direct relationship with the individuals whose personal data it processes.

You can view our California and Oregon data broker registrations by clicking on these links. Additional information for California and Oregon residents can be found at the end of this Statement.

Please visit our Privacy Policy to learn more about our data collection practices and how to exercise any rights you may have.

MedPro assists our pharmaceutical, medical device and other Life Sciences industry customers in achieving regulatory compliance by providing high quality healthcare practitioner (“HCP”) and healthcare organization (“HCO”) data. MedPro does not market directly to HCPs or HCOs.

Interactions between the Life Sciences industry, HCPs, and HCOs are highly regulated at the federal, state, and local levels. MedPro obtains, updates, and verifies HCP and HCO data to provide our customers with the information necessary to meet their regulatory obligations and commercial goals.

Examples of Regulatory Uses of HCP and HCO Data*:

  • Prescription Drug Marketing Act of 1987 (“PDMA”) – HCP Verification
  • Aggregate Spend – HCP/HCO Identification; Federal, State, and Local Transparency Reporting
  • False Claims Act Prevention – HCP Specialty Verification
  • Stark Law – HCP/HCO Identification and Aggregation of Nonmonetary Compensation
  • OIG Corporate Integrity Agreement Obligations – HCP/HCO Verification
  • Drug Quality and Security Act (“DQSA”) – HCP/HCO Verification
  • Florida HCCE License Validation – HCP/HCO Verification
  • Ohio TDDD License Validation – HCP/HCO Verification
  • Pharmaceutical and Medical Device Product Distribution – HCP/HCO Verification

Sources of Information:

MedPro obtains HCP and HCO data directly from federal and state government agencies and other sources of publicly available information. MedPro also acquires data from various third parties, including other regulatory entities, quasi-governmental agencies, payers, professional associations, and the HCOs with which HCPs are affiliated (“Third party Data”). In these instances, MedPro has no direct contact with the individuals whose information is being collected; such data is controlled and managed by the entities from which MedPro acquires the information.

MedPro’s customers also provide their own data (“Customer Data”) to MedPro for the purposes of data verification, aggregation, and enrichment. MedPro will not disclose or reference any Customer Data to unauthorized third parties except as directed in the applicable MedPro Order Form, Services Agreement, Statement of Work, or other customer agreement, (collectively, “Customer Agreement”), or as may be permitted or required by law, or otherwise on an aggregated/anonymized basis.

How MedPro Uses Third Party and Customer Data:

MedPro uses and discloses Third party and Customer Data, as applicable, for the purposes of providing our services, preventing or addressing service or technical problems, at a customer’s request in connection with customer support matters, or as may be permitted or required by law and otherwise in accordance with the Customer Agreement. Under MedPro’s current agreements, any Customer Data (including any personal data) belongs to MedPro’s customers.

Access Rights:

In the aforementioned situations, MedPro has no direct relationship with the individuals whose data it obtains and processes solely for purposes of providing the contracted for services. As such, individuals who would like information about the collection, sale, or disclosure of their data or to have updates made or information removed from their data should first contact that controlling entity directly unless otherwise noted in this Statement.  

MedPro abides by its contractual obligations and restrictions regarding access, disclosure, and deletion of Customer Data. If the controlling entity requests MedPro’s assistance with providing disclosure information or updating or removing Customer Data, including personal data, MedPro will respond to such requests in a timely manner. In the limited instances where MedPro collects personal data as a data controller it will provide notice to those individuals at or before the time of collection and respond to individual rights requests, as required by applicable data protection law.

Security:

MedPro is committed to honoring and protecting the privacy and security of Customer Data, including personal data. MedPro institutes reasonable and appropriate technical, administrative and physical safeguards designed to protect personal data in its possession from loss, misuse and unauthorized access, disclosure, alteration and destruction. This includes training MedPro’s employees on the importance of data privacy, security, and accuracy.

Oregon Residents

MedPro is a registered Data Broker under ORS § 646A.593. Oregon Consumers have the right to opt out of all or a portion of our collection, sale or licensing of their Brokered Personal Data. You may authorize an agent to exercise this right if we can verify, with commercially reasonable effort, your identity and the authorized agent’s authority to act on your behalf. To exercise this right, call (833)-633-4866 or send an email to privacy@MedProSystems.com. If we deny your request, we will include information with the denial that describes how you can appeal. The terms Brokered Personal Data and Consumer have the meanings ascribed in ORS § 646A.593.

California Residents

MedPro is a registered Data Broker under California Civil Code § 1798.99.80. Capitalized terms within this section are defined in California Civil Code § 1798.99.80 and § 1798.140. You can find additional information on how we comply with the California Consumer Privacy Act of 2018, as amended, by visiting our Privacy Policy [link].

California Consumers have the following rights with respect to the Personal Information we collect about them. These rights may be subject to certain limitations.

  • Delete Personal Information.
  • Correct inaccurate Personal Information.
  • Know what Personal Information is being collected and to access that Personal Information.
  • Know what Personal Information is being Sold or Shared and to whom.
  • Opt out of the Sale or Sharing of Personal Information.
  • Limit the use and disclosure of Sensitive Personal Information.

You can exercise your right to Opt-out, Limit use, Delete, Correct, and Know by calling (833)-633-4866 or sending an email to CCPA@MedProSystems.com. When contacting us, please provide the following information:

  • Subject line: CCPA Request.
  • Describe which CCPA right(s) you are exercising.
  • Include your full name and any previous names by which you were known to help us locate your Personal Information.
  • Include your full residential address and any previous residential addresses to help us locate your Personal Information.
  • Include your telephone number or email address where you can be reached so we can communicate with you regarding your CCPA request.

We do not use or disclose your Sensitive Personal Information for purposes that are not permitted under the CCPA.

Verification. We reserve the right to respond only to a verifiable request to exercise a right to Delete, Correct and Know. A verifiable request may be made by any of the following:

  • the California resident who is the subject of the request,
  • a California resident on behalf of their minor child, or
  • a natural person or person registered with the Secretary of State authorized to act on behalf of the California resident, where permitted by applicable law.

If we request, you must provide sufficient information to verify your identity and/or authority to act on behalf of the California resident. In general, we may ask you to provide identifying information that we already maintain about you or we may use a third-party verification service. In either event, we will try to avoid asking you for Sensitive Personal Information to verify your identity. We may not be able to respond to your request if we cannot verify your identity or authority to make the request and/or confirm the Personal Information relates to you. Please note that making a request does not require you to create an account with us.

Please note that the CCPA does not apply to certain information, including publicly available information.

When MedPro receives a verified request for a Consumer to opt-out, know, or have Personal Information deleted, MedPro shall inform the Consumer of its determination within 45 days of receiving a verifiable Consumer request from the Consumer. In the event of a complicated request, MedPro may extend the time by an additional 45 days when reasonably necessary and provide the Consumer with notice of the extension within the first 45-day period.

You may only make a verifiable consumer request for access or data portability twice within a twelve-month period. MedPro will not charge a fee to process or respond to your verifiable consumer request unless MedPro reasonably determines it is excessive, repetitive, or manifestly unfounded. As such, if MedPro determine that the request warrants a fee, MedPro will tell you why it made that decision and provide you with a cost estimate before completing your request.

Agents. Subject to certain limitations, you may authorize a natural person or a business registered with the Secretary of State to exercise a right on your behalf. Unless you have provided the authorized agent with a qualifying power of attorney, you must provide your authorized agent with written permission (signed by you) to act on your behalf and verify their identity with us. We reserve the right to deny requests from persons or businesses claiming to be authorized agents that do not submit sufficient proof of their authorization.

Additional Information for Residents of All States:

Please visit our Privacy Policy for additional information on our data collection practices.

Contact Information:

MedPro Systems, LLC 100 Stierli Court
Mt. Arlington, NJ 07856
(973)-398-7800
medproidcontactus@medprosystems.com