Privacy Statement for Quintiles

Protection of Individually Identifiable Information

At Quintiles Transnational Corp., the foundation of our business is information. Given the nature of our work, the protection of personal data is critical for our company and our customers. For these reasons, Quintiles has issued a global corporate policy for the protection of the confidentiality of individually identifiable information in accordance with applicable laws and regulations, regardless of the nature, source or form of the information.

Quintiles intends that its corporate privacy policy and standard practices and procedures will ensure timely compliance with applicable United States and international laws and regulations, including, as applicable, the Health Insurance Portability and Accountability Act of 1996 (HIPAA) - mandated Standards for Privacy of Individually Identifiable Health Information issued by the U.S. Department of Health and Human Services (HHS) and the European Union (EU) Data Protection Directive.

To monitor implementation of the company's global policy for the protection of individually identifiable information, Quintiles has chartered the Council on Data Protection (CODP), which serves as Quintiles' "privacy office" and internal privacy board, reporting to the Office of the General Counsel. The Chair of the Council serves as Quintiles' Privacy Officer. The Council includes members and advisors from a representative cross-section of operations and across geographies and lines of business.

In addition, the Council is charged with monitoring the company's compliance with applicable data protection laws and regulations, including, as applicable, the HIPAA - mandated HHS privacy regulation and the EU Data Protection Directive. The CODP also functions as Quintiles' privacy inquiry office and has established a complaint office to receive, log and handle any complaints Quintiles may receive regarding data privacy. Further, the Council is implementing an awareness training program in the company's privacy policy and procedures for the company's employees.

For further information about data protection, please contact the Council on Data Protection.

Version 2.0 December 1, 2002. This Privacy Policy Notification is reviewed periodically by Quintiles' Council on Data Protection and updated as appropriate. The Council reserves the right to change or alter this privacy policy notification without notice.