Powering the Immune System to Transform Lives

Candidate Privacy Notice

Last updated August 2026

We are required by law in certain jurisdictions to provide you with this Notice about the collection and use of your personal information, which reflects our current practices and those utilized during the past 12 months. We encourage you to read it carefully.

1.  INTRODUCTION

This Notice describes the categories of personal information that Vir Biotechnology, Inc. (“Vir Biotechnology”, “we”, “us” and “our”) collects about individuals who apply or are recruited for a job with us or one of our affiliates (“candidates”), and the purposes for which we use that information.

For purposes of this Notice, “personal information” has the meaning reflected (including whether characterized as “personal data” or similar terms) in applicable data protection laws (collectively, “Data Protection Laws”), which include, but are not limited to:

This Notice does not create or form part of any contract for employment or otherwise. If you have questions about this Notice, you can contact Vir Biotechnology at:

  • privacy@vir.bio for general privacy inquiries; or 
  • dpo@vir.bio to reach Vir Biotechnology’s EU and UK Data Protection Officer, a function performed by Trilateral Research, located at: Trilateral Research c/o Vir Biotechnology, Inc., 2nd Floor Marine Point, Belview Port, Waterford (X91 W0XW – Ireland).
     

2. PERSONAL INFORMATION WE COLLECT ABOUT CANDIDATES

2.1. Categories of personal information. The categories of personal information we may collect and process during the application and recruitment process include:

  • Identifiers and contact details: including name, postal address, telephone number and email address.
  • Professional or employment-related information: information contained in your application materials, such as your resume or CV, cover letter, writing samples, references, work history, education information (including transcripts), and any information that referrers or recruiters provide about you.
  • Professional qualifications: licenses, permits, memberships, certifications and other professional credentials.
  • Recruitment process information: notes and records from phone-screens, interviews, assessments, evaluations and outcomes of recruiting exercises.
  • Biographical information: gender, date of birth, language proficiencies and any information you make publicly available through job search or career networking sites.
  • Job preferences: desired position and compensation, preferred work location and willingness to relocate.
  • Inferences: inferences derived from other categories of personal information used to create a profile reflecting your behaviour, intelligence, abilities, and aptitudes.
  • Other information you provide: any additional information you choose to disclose to us during the recruitment process.

2.2. Use of sensitive personal information. Some of the personal information we collect may be subject to additional protections under applicable Data Protection Laws, such as “sensitive personal information” under the CCPA or “special category data” under the GDPR or similar classifications. We use this information only for the purposes described in this Notice and do not use or disclose it to infer characteristics about you. Such information may include:

  • Background check information: information required to conduct background checks, credit checks or other screenings (where permitted by law), and the results of such checks.
  • Employment eligibility information: immigration status and other information needed to verify your right to work.
  • Accommodation information related to health status: information needed to understand and evaluate requests for accommodations related to disabilities or health conditions.

2.3. Sources of personal information. We collect personal information directly from you when you apply for a role and throughout the application and recruitment process. We may also collect your personal information from other sources and combine it with the personal information you provide us. For example, we may collect your personal information from:

  • Job application platforms, such as job boards or career websites you use to submit your application.
  • Prior employers that provide us with employment references.
  • Professional references that you authorize us to contact.
  • Pre-employment screening service providers, such as background check providers, where permitted by law.
  • Employment agencies and recruiters who refer you for a role.
  • Educational institutions, such as universities or training providers.
  • Publicly available sources, such as publicly accessible profiles on professional networking platforms (e.g., LinkedIn), company websites and other publicly available online directories. 
  • Online activity information, such as information collected from server logs, cookies and similar technologies on our Careers Site. Please see Vir Biotechnology’s website privacy notice for more details.
  • Vir Biotechnology personnel involved in the recruitment process, such as interviewers and hiring managers.

2.4. Legal basis for processing your personal data

  • For candidates in the EU and UK: We process your personal information based on our legitimate interests (Article 6(1)(f) GDPR / UK GDPR). This means we use your information when necessary to manage the recruitment process, including reviewing applications, assessing suitability for roles, communicating with you and conducting pre-employment checks. We ensure that your rights and interests are carefully considered and that processing is proportionate.
  • For candidates outside the EU and UK: Providing personal information to us is voluntary. However, if you choose not to provide certain information, we may be unable to evaluate your application or, if you are hired, your eligibility, promotion, transfer or relocation.

Where we process sensitive personal information / special category data pursuant to Section 2.2. above, this processing is carried out:

  • For candidates in the EU and the UK, in accordance with Article 9(2)(b) GDPR / UK GDPR (employment, social security, and social protection law obligations) or, where required, Article 9(2)(a) GDPR / UK GDPR based on the candidate's explicit consent.

  • For candidates outside the EU and the UK, in accordance with applicable local data protection and employment laws, including, where required, on the basis of the candidate's explicit consent.

Where permitted by law, we may ask you for additional information to comply with applicable laws or inquire about criminal records. 
 

3. HOW WE USE PERSONAL INFORMATION ABOUT CANDIDATES

3.1. Purposes for which we use personal information. We may use the categories of personal information above for the following purposes:

  • Recruitment and hiring management. This includes:
    • Operating and maintaining the Careers Site we provide or any other site to which this Notice is posted.
    • Managing all stages of the recruitment process, including reviewing applications, interviewing and evaluating candidates, and conducting assessments.
    • Conducting background checks and other pre-employment screenings, where permitted by law.
    • Analyzing, improving and optimizing our application and recruitment processes.
    • Understanding and accommodating disabilities or health conditions, as applicable.
    • Communicating with you regarding your candidacy, opportunities at Vir Biotechnology or updates to the Careers Site, policies or terms.
    • Carrying out other internal business operations related to recruitment and talent management.
  • Compliance, safety and fraud prevention. This includes:
    • Complying with, or monitoring compliance with, applicable laws, regulations, reporting requirements, and equal opportunity obligations.
    • Enforcing our internal policies and procedures.
    • Responding to lawful requests and legal process, including subpoenas and government authority inquiries.
    • Protecting the rights, property and safety of our company, candidates, employees and others.
    • Investigating, preventing, or addressing fraud, abuse, unauthorized access, harmful activities, or violations of law or company policies or procedures.
    • Sharing information with government authorities, law enforcement, courts or private parties when we have a good-faith belief it is necessary for these purposes.
  • Analytics and business insights. Creating anonymous, aggregated or de-identified information that we use and disclose to analyze our application and recruitment activities, to improve our business operations and for other lawful business purposes.

3.2. Disclosing personal information. We may disclose your personal information to third parties as necessary for the purposes described above. For example, we may disclose your personal information to:

  • Affiliates. Our corporate parent, subsidiaries, and other affiliates under the control of our corporate parent, for purposes consistent with this Notice or to operate shared infrastructure, systems and technology.
  • Vir Biotechnology service providers. Companies that provide us with services to support recruitment and business operations, such as job boards, recruiters, interviewing and testing, pre-employment screening services (where permitted by law), interview travel booking and expense reimbursement (where applicable), relocation providers (where applicable), and recruitment analytics providers.
  • Government authorities, law enforcement and others. Government authorities, law enforcement, courts, and other third parties as described in the compliance, safety and fraud prevention section above.
  • Business transfers. Third parties involved in actual or potential corporate transactions whereby we sell, transfer or otherwise disclose some or all information regarding our business or assets, including your personal information, such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.
  • Professional advisors. External advisors such as lawyers, auditors, consultants, and immigration specialists.
  • Customers and business partners. Customers and other companies or individuals with whom Vir Biotechnology does business or is exploring a business relationship.

We do not “sell” or “share” candidate personal information for cross‑context behavioral advertising as those terms are defined under the CCPA. Furthermore, we do not knowingly sell or share the personal information of those under 16 years of age. Our employment opportunities are intended for individuals who are 18 years of age or older, and accordingly our Careers Site is not intended for minors under the age of 18. For further details on Vir Biotechnology's practices with respect to personal information of individuals who are under 18 years of age, please refer to the “Children’s Privacy” section of Vir Biotechnology's website privacy notice.

3.3. International Data Transfers. If you are located outside of the United States, your personal data will be transferred to the United States. 

  • For EU/EEA or UK candidates, the transfer relies on Standard Contractual Clauses (SCCs) (including UK Addendum or Swiss Addendum, as applicable) supplemented with additional safeguards, because each of the European Commission, UK Information Commissioner’s Office and Swiss Federal Data Protection and Information Commissioner have determined that the United States does not ensure an adequate level of data protection. 
  • For Swiss candidates, the transfer relies on the Swiss Data Protection Framework.

 

4. HOW LONG WE KEEP PERSONAL INFORMATION ABOUT CANDIDATES
We retain the personal information described in this Notice for as long as necessary to fulfil the purposes described above, including to evaluate your application, manage the recruitment process and comply with applicable legal or regulatory requirements.

To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.

Unless a longer retention period is required or permitted by law, your personal information is generally retained for a limited period after the recruitment process concludes (for example, to address potential legal claims or to consider candidates for future opportunities). The criteria used to determine our retention periods include (i) the duration of the recruitment process; (ii) whether there is a legal obligation to which we are subject; and (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, actual or threatened litigation, or regulatory investigations).

In some circumstances we may anonymize your personal information (so that it can no longer be associated with you and we will not attempt to reidentify such personal information as yours) in which case we may use this information indefinitely without further notice to you.
 

5. DATA SECURITY

We maintain reasonable administrative, technical, and physical safeguards designed to protect applicants’ personal information from unauthorized access, use, or disclosure, in accordance with applicable Data Protection Laws.
 

6. YOUR PRIVACY RIGHTS

Depending on your residency or location, you may have certain rights under applicable Data Protection Laws regarding your personal information. These may include, where applicable, the right to access, correct, delete or port your personal information, to restrict or object to certain processing, and to withdraw consent (where such processing is based on consent). For further details on these rights and how to exercise them, please refer to the relevant section below of Vir Biotechnology’s website privacy notice:


7. OTHER INFORMATION ABOUT THIS NOTICE

7.1. Third parties’ practices. This Notice does not address, and we are not responsible for, the practices of any third parties, which have their own policies that govern how they collect and use your personal information. Links to third party websites or services are provided for convenience and do not constitute endorsements.

7.2. Alternative formats for candidates with disabilities. Upon request, this Notice is available in alternative formats, such as large print, braille, or audio. To request an alternative format, please contact privacy@vir.bio.

7.3. Changes to this Notice. We may update this Notice at any time. The “Effective Date” at the top indicates when it was last revised. Any changes will become effective when we post the revised notice on our Careers Site. As stated in Section 7.2 above, alternative formats of the updated Notice are available upon request.

7.4. Automated Decision-Making. Your personal information is not subject to automated decision-making within the meanings set forth in applicable Data Protection Laws or any rules set forth thereunder, nor will your personal information be used to train any of Vir Biotechnology’s artificial intelligence tools.

8. YOUR OBLIGATIONS

Among other obligations, including without limitation the obligation to provide complete and accurate information in recruiting documents and processes, it is your responsibility to ensure that information you submit does not violate any third party’s rights.

You should keep your personal information on file with Vir Biotechnology up to date and inform us of any significant changes to it.