Bank of America · Bank of America Deposit Agreement

Data Sharing and Privacy Practices

Medium severity
Share 𝕏 Share in Share 🔒 PDF

What it is

Bank of America shares your financial and personal data with affiliated companies and some outside companies for purposes including marketing, and by using online banking you agree to those practices as described in their separate Privacy Notice.

Consumer impact (what this means for users)

This provision enables Bank of America to share your financial account data, transaction history, and personal information with affiliated companies and certain third parties for marketing purposes, which means your banking behavior influences advertising you receive unless you exercise your opt-out rights under GLBA.

Cross-platform context

See how other platforms handle Data Sharing and Privacy Practices and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Your banking data — including transaction history, balance information, and personal identifiers — can be shared with affiliate companies and third parties for marketing purposes, meaning your financial behavior may be used to target you with advertising or offers from entities beyond Bank of America itself.

View original clause language
We may share information about you and your account history with our affiliates and with non-affiliated third parties as permitted by law and described in our Privacy Notice. This includes sharing for purposes such as providing and improving services, marketing, and as required by law. By using Online Banking, you agree to the data practices described in our Privacy Notice, which is incorporated by reference into this Agreement.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: This provision engages the Gramm-Leach-Bliley Act (15 U.S.C. §6801 et seq.) and its implementing Regulation P (12 CFR Part 1016), which governs financial institution privacy notices and opt-out rights. The California Consumer Privacy Act (Cal. Civ. Code §1798.100) provides California residents with rights to know, delete, and opt out of the sale or sharing of personal information. The FTC Act Section 5 applies to material misrepresentations in privacy notices. CFPB examination procedures for privacy compliance apply as primary federal supervisor.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • CFPB
    The CFPB is the primary federal examiner for Regulation P (GLBA privacy) compliance at Bank of America and investigates consumer complaints about financial data sharing practices.
    File a complaint →
  • FTC
    The FTC enforces against deceptive privacy practices under Section 5 and has authority over data sharing disclosures in consumer financial services.
    File a complaint →

Provision details

Document information
Document
Bank of America Deposit Agreement
Entity
Bank of America
Document last updated
April 29, 2026
Tracking information
First tracked
March 7, 2026
Last verified
April 27, 2026
Record ID
CA-P-003313
Document ID
CA-D-00053
Evidence Provenance
Source URL
Wayback Machine
SHA-256
3a84db97f26e6cc43ba57e3064c862f0c801f02c98b952132bcb7ba1add9a99c
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Bank of America | Document: Bank of America Deposit Agreement | Record: CA-P-003313
Captured: 2026-03-07 04:40:52 UTC | SHA-256: 3a84db97f26e6cc4…
URL: https://conductatlas.com/platform/bank-of-america/bank-of-america-deposit-agreement/data-sharing-and-privacy-practices/
Accessed: May 2, 2026
Classification
Severity
Medium
Categories

Other provisions in this document