Company: ISRG
Filing Date: 2025-01-31
Form Type: 10-K
Source: 0001035267-25-000017
Chunk: 83

Company: INTUITIVE SURGICAL INC
Filing Date: 2025-01-31
Form: 10-K
Item: Item 1
Chunk 83
---
 in the scope and degree of documentation and testing required. There can be no assurance that the outcomes from such documentation and testing will be acceptable to any particular regulatory agency or will continue to be acceptable over time. There are further regulations governing the importation, marketing, sale, distribution, use, and service as well as the removal and disposal of medical devices in the regions in which we operate and market our products. Failure to comply with any of these regulations could result in sanctions or fines and could prevent us from marketing our products in these regions.

Data Privacy and Security Laws 

Numerous state, federal, and foreign laws, regulations, and standards govern the collection, use, access to, confidentiality, and security of health-related and other personal information and could apply now or in the future to our operations or the operations of our partners. In the U.S., numerous federal and state laws and regulations, including data breach notification laws, health information privacy and security laws, and consumer protection laws and regulations govern the collection, use, disclosure, and protection of health-related and other personal information. In addition, certain foreign laws govern the privacy and security of personal data, including health-related data. Privacy and security laws, regulations, and other obligations are constantly evolving, may conflict with each other to complicate compliance efforts, and can result in investigations, proceedings, or actions that lead to significant civil and/or criminal penalties and restrictions on data processing.

We collect, process, share, disclose, transfer, and otherwise use data, some of which contains personal information about identifiable individuals including, but not limited to, our employees, clinical trial participants, partners, and vendors. Therefore, we are subject to U.S. (federal, state, local) and international laws and regulations, including those in the European Economic Area (“EEA”) and the United Kingdom (“UK”) regarding data privacy and security and our use of such data.

We are subject to the European Union General Data Protection Regulation 2016/679 and applicable national supplementing laws (collectively, the “EU GDPR”) and to the United Kingdom General Data Protection Regulation and Data Protection Act 2018 (collectively, the “UK GDPR”) (the EU GDPR and UK GDPR together referred to as the “GDPR”). The GDPR imposes comprehensive data privacy compliance obligations in relation to our collection, processing, sharing, disclosure, transfer, and other use of data relating to an identifiable living individual or “personal data,” including a principle of accountability and the obligation to demonstrate compliance through policies, procedures, training, and