F500 Pharma & Biotech · Medical Products and Equipment · Structural / no discrete incident
Zimmer Biomet
Headline
Zimmer Biomet publishes a dedicated Consumer Health Data privacy notice, and that is genuinely notable in a tab where most companies have no consumer-facing privacy documentation at all.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Zimmer Biomet publishes a dedicated Consumer Health Data privacy notice, and that is genuinely notable in a tab where most companies have no consumer-facing privacy documentation at all. Such notices exist largely because Washington State's My Health My Data Act and similar laws created obligations that reach health data outside HIPAA's perimeter - which means the disclosure exists because a state legislature compelled it, not because the sector chose transparency. Say plainly what is true: Zimmer Biomet is doing something its peers are not, and the reason is statutory rather than voluntary.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
MAJOR $172 MILLION LAWSUIT AGAINST DELOITTE (Zimmer's own IT/consulting vendor, not a data-privacy matter but a significant related dispute): Zimmer Biomet sued Deloitte (N.Y. Sup. Ct., Sept. 4, 2025) over an allegedly failed SAP S/4HANA implementation; Deloitte has asked the court to dismiss the case, arguing (per court filings, Nov 2025) that Zimmer failed to provide proper breach notice under their contract and that a private B2B contract dispute isn't 'consumer-oriented' conduct — an important reminder that even when $172 MILLION is at stake, this is a VENDOR CONTRACT DISPUTE between two businesses, not a consumer-facing privacy claim.
Data sharing
GENUINELY NOTABLE FINDING: Zimmer Biomet publishes a DEDICATED 'Consumer Health Data Privacy Policy' — a supplemental notice specifically governing sensitive health data collected via its products/services (treatment/health-trend data from orthopedic devices, website cookies/analytics, marketing list sign-ups) — explicitly designed to comply with newer state 'Consumer Health Data' (CHD) laws (e.g., Washington's My Health My Data Act). This is a more explicit, dedicated health-data-specific privacy framework than most other medical-device companies in this tracker have been found to publish, worth noting as a comparatively transparent practice.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy zimmerbiomet.com/en/corporate/privacy-notice.html | Not fetched yet | NO (HTML only) |
| Terms of service zimmerbiomet.com/en/corporate/terms-of-use.html | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.