Contents

Customers of Omnicell, Inc. and/or its direct and indirect subsidiaries (collectively, “Omnicell”) who choose to use the fingerprint bioID features of Omnicell products are responsible for complying with the Illinois Biometric Information Privacy Act (“BIPA”). BIPA sets out certain rules related to the collection, use and storage of “biometric identifiers,” like fingerprints, and associated “biometric information,” as both terms are defined in BIPA. Customers should review BIPA requirements and ensure that their practices are in compliance with BIPA before electing to use the bioID features of Omnicell products.

Omnicell does not collect, capture, receive, purchase or otherwise obtain biometric identifiers or biometric information associated with customers’ products. In the event a customer chooses to take such actions in order to use the bioID features of Omnicell products, the customer must first obtain express written consent from the person from whom the biometric identifiers or biometric information is collected, in compliance with BIPA. This consent must apply to the customer as well as to Omnicell, in the event Omnicell ever comes into contact with such biometric identifiers or biometric information (biometric identifiers are not stored on Omnicell products). Customers should not share any biometric identifiers or biometric information with Omnicell unless express written consent to share such information with Omnicell, in compliance with BIPA, has been obtained from the person from whom the biometric identifiers or biometric information have or has been collected.

Customers must delete all biometric identifiers and biometric information used with Omnicell’s products within three (3) years of the individual’s last interaction with the customer, or after the initial purpose for collecting such information has been satisfied, whichever occurs first. In the event a customer returns products to Omnicell at any time, customers should delete all biometric identifiers and biometric information from the products before returning them to Omnicell. Omnicell will permanently delete all data left on the products, including biometric identifiers and biometric information, upon receipt of the products.

The customer, not Omnicell, possesses any biometric identifiers or biometric information associated with customers’ use of bioID features. To the extent Omnicell possesses any biometric identifiers or biometric information at all, Omnicell will permanently delete such data when the initial purpose for collecting or obtaining the data has been satisfied or within three (3) years of the individual's last interaction with Omnicell, whichever occurs first.

Omnicell does not sell or disclose biometric identifiers or biometric information to third parties. To the extent Omnicell possesses biometric identifiers or biometric information at all, that data is subject to the same or greater protection as other confidential and sensitive data.