Abbott Laboratories

United States · www.freestyle.abbott · 13 vendors

Abbott Laboratories is a global healthcare company that discovers, develops, manufactures, and markets a broad portfolio of products. These include diagnostics, medical devices, nutritional products, and branded generic pharmaceuticals, serving people in over 160 countries.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 2 categories; runs on 13 sub-vendors.

Insights

Last updated 2026-08-17 · revision 1

13 direct vendors, 203 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Abbott Laboratories exhibits high migration readiness, primarily driven by its advanced and cloud-centric technology stack. The company's adoption of multiple major cloud providers (Azure, AWS, GCP) signifies extensive experience and investment in cloud infrastructure, which is a foundational element for successful migration. The use of containerization technologies like Kubernetes and Docker, alongside CI/CD tools such as Jenkins and GitHub Actions, indicates a modern, agile development and deployment environment that is highly conducive to cloud-native architectures and seamless workload migration. Existing compliance certifications (ISO, HITRUST CSF) for platforms like LibreView demonstrate a proven ability to manage sensitive data in a regulated cloud environment, mitigating a significant challenge often faced during healthcare migrations. While specific data on legacy systems is not provided, the presence of SAP ERP suggests potential areas requiring careful migration planning. The main challenges and unknowns for migration readiness stem from missing data: specific data residency requirements are not specified, which can be a critical factor in global healthcare operations and could introduce complexity. Similarly, detailed information on the regulatory environment across all operating countries is absent. The ambiguity in vendor relationships ('Total Vendors: 0' vs. 'Vendor Geographic Diversity: 2 unique countries') makes it difficult to fully assess non-cloud vendor lock-in risks, though the multi-cloud strategy mitigates cloud vendor lock-in. Despite these data gaps, the strong foundation in cloud adoption, modern infrastructure, and compliance positions Abbott favorably for future migration initiatives.

Compliance

10 in-scope frameworks identified; showing 3.

NIS2 (source) — Assessment Required

Abbott Laboratories is a large multinational healthcare and medical device company with confirmed operations across numerous EU member states. NIS2 classifies healthcare entities as 'Essential Entities' under Annex I of the Directive (Article 3). Abbott's FreeStyle Libre CGM system and other medical devices are networked digital health products that process patient health data in real time, making them directly relevant to NIS2's cybersecurity requirements for health sector entities. Risk is High because: (1) healthcare is explicitly listed as an Essential Entity sector under NIS2, (2) Abbott's scale (operations in 30+ EU countries, tens of thousands of EU employees, billions in EU revenue) clearly exceeds the medium enterprise threshold (50+ employees, €10M+ turnover), (3) a cybersecurity incident affecting Abbott's medical devices or health data systems could have direct patient safety implications, (4) NIS2 penalties for Essential Entities can reach €10 million or 2% of global annual turnover (whichever is higher), and (5) NIS2 was transposed into national law by October 2024 and enforcement is actively beginning across EU member states.

Evidence: https://www.abbott.com/en-us/global-locations-contacts, https://www.abbott.com/privacy-policy.html, https://www.freestyle.abbott/us-en/home.html

GDPR (source) — Compliant

Abbott is a US-headquartered company but operates extensively across the EU/EEA (confirmed presence in Germany, France, Ireland, Italy, Spain, Netherlands, Belgium, Denmark, Sweden, Finland, Austria, Poland, Czech Republic, Hungary, Romania, Portugal, Greece, and more). Abbott processes significant volumes of sensitive health data (glucose readings, medical device data, clinical trial data) of EU/EEA residents through its FreeStyle Libre CGM platform and other medical products. Abbott maintains a separate European Privacy Policy (referenced on their website) and uses OneTrust for privacy rights management, indicating active GDPR compliance infrastructure. Risk is Medium rather than Low because: (1) the volume and sensitivity of health data processed is very high (biometric, medical condition data), (2) cross-border data transfers from EU to US are inherent in their operations, (3) enforcement of GDPR in the healthcare/medical device sector is increasing across EU member states, and (4) any breach involving health data would trigger mandatory 72-hour notification obligations. The company's scale and complexity increase the likelihood of compliance gaps.

Evidence: https://www.abbott.com/privacy-policy.html, https://www.abbott.com/en-us/global-locations-contacts, https://www.freestyle.abbott/us-en/home.html, https://www.abbott.com/en-us/privacy-policy

US State Consumer Health Data Privacy Laws — Assessment Required

Abbott maintains a separate Consumer Health Data Privacy Policy (confirmed on their website), indicating awareness of and response to emerging US state health data privacy laws. Risk is Medium because: (1) Abbott's medical devices and digital health apps collect consumer health data (glucose readings, health metrics) that fall squarely within the scope of these laws, (2) Washington's My Health MY Data Act has broad applicability and significant penalties, (3) multiple states are enacting similar laws (Nevada, Connecticut, etc.), (4) Abbott's acknowledgment of these laws through a dedicated Consumer Health Data Privacy Policy demonstrates compliance awareness, and (5) the regulatory landscape is rapidly evolving with new state laws being enacted.

Evidence: https://www.abbott.com/privacy-policy/consumer-health-data.html, https://www.abbott.com/privacy-policy.html, https://www.freestyle.abbott/us-en/home.html

Financials

Three-year financials

Financial Resilience Score: 9/10

Abbott Laboratories demonstrates exceptional financial resilience underpinned by a highly diversified business model spanning four major segments: Medical Devices, Diagnostics, Established Pharmaceuticals, and Nutrition. This diversification substantially reduces exposure to single-market shocks, as evidenced by the company's ability to absorb the dramatic runoff of COVID-19 diagnostic testing revenue (from ~$8.4bn in 2022 to under $1bn in 2024) while still growing organic sales at high-single-digit rates. The company maintains investment-grade credit ratings (A+ / A1 area), strong free cash flow of approximately $6-7bn annually, and a fortress balance sheet with declining net debt since 2022. Abbott's status as a Dividend King (60+ years of consecutive dividend increases) signals durable long-term cash generation. Growth engines including FreeStyle Libre (growing 20%+ annually, reaching ~$6.5bn in 2024) and the Structural Heart franchise provide sustained momentum. Global footprint across 160+ countries offers geographic and currency diversification. However, risks include ongoing NEC-related infant formula litigation, the reputational aftermath of the 2022 Sturgis plant recall, FX headwinds from emerging-market exposure, and rising concentration in the Libre franchise within Medical Devices.

Key strengths: Diversification across 4 segments (Medical Devices, Diagnostics, Established Pharmaceuticals, Nutrition), Investment-grade credit ratings (A+ / A1 area), Strong free cash flow of ~$6-7bn per year, 60+ years of consecutive dividend increases (Dividend King), FreeStyle Libre blockbuster growth engine (~20%+ annual growth), Structural Heart franchise growing double digits, Global manufacturing and distribution in 160+ countries, High-single-digit organic growth excluding COVID

Risk factors: COVID-testing revenue cliff distorting historical comparisons, FX headwinds from emerging-market exposure (Latin America, India, Middle East), Ongoing Similac/NEC infant formula litigation, 2022 Sturgis, MI infant-formula plant recall reputational impact, Pricing pressure in Established Pharmaceuticals and diagnostics reimbursement, Rising concentration in FreeStyle Libre within Medical Devices

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report