INSMED CONSUMER HEALTH DATA PRIVACY POLICY

This Consumer Health Data Privacy Policy applies to “Consumer Health Data,” as that term has been defined under applicable law, that Insmed Incorporated (also referred to as “Insmed” or “us”) collects from Consumers (collectively referred to as “You”). Any term appearing in this Consumer Health Data Privacy Policy that has been defined under applicable Consumer Health Data laws shall have the meaning afforded to it therein.

A. Collection of Consumer Health Data

We may Collect the following categories of Consumer Health Data from You:

We may Collect and use the above-mentioned categories of Consumer Health Data for the following purposes:

B. The Categories of Sources from Which We Collect Consumer Health Data

Insmed collects Consumer Health Data about You when You actively provide it to us, such as by completing an online form, responding to a request for information, signing up to receive communications from us, or sending us an email or letter. Some areas of our website ask You to submit Consumer Health Data for You to benefit from the specified features or to participate in a particular activity. We also may collect Consumer Health Data about You from other sources, such as our business partners; the Internet, including social media websites; and other organizations or individuals as permitted under applicable law.

C. The Categories of Consumer Health Data that We Share

We Share all categories of Consumer Health Data that we Collect.

D. Parties with Whom We Share Consumer Health Data

E. How to Exercise Your Consumer Health Data Rights

To exercise Your rights with respect to Your Consumer Health Data, depending on your state of residence, You may contact us at any time through any of the following methods:

Supplement to Consumer Health Data Privacy Policy for Nevada Consumers

This Supplement applies to Nevada Consumers and provides additional disclosures required by the Nevada Consumer Health Data Privacy Law. Terms used in this Supplement that are defined terms under the Nevada Consumer Health Data Privacy Law have the meanings given to them by that law.

  1. Purposes & Manner of Processing. We Collect, use, Process, and Share Consumer Health Data for the purposes and in the manners described in our Consumer Health Data Privacy Policy, which also provides additional disclosures relevant to Nevada Consumers.
  2. Review & Revision of Consumer Health Data. If You would like to review and/or revise Your Consumer Health Data, You may submit a request to us via the methods listed in our Consumer Health Data Privacy Policy. We will respond to Your requests to exercise Your rights in accordance with applicable law, but in any case, no later than 45 days after receiving Your request. We may extend this period up to 45 days only when doing so is permitted under applicable law.
  3. Changes to this Supplement. We will notify You before making any changes to our privacy practices with respect to Your Consumer Health Data by posting an updated notice on this page, with an updated effective date.
  4. Third Party Collection of Consumer Health Data. Please note that some Third Parties may collect Consumer Health Data about You over time and across different websites or online services You may visit.

Effective Date: June 13, 2025