Provision record
Bank of America · Bank of America Deposit Agreement · View original document ↗

Data Sharing and Privacy Practices

Medium severity Common · 288 of 352 platforms
Stay ahead of the changes
Track Bank of America and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF

This analysis describes what Bank of America's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The clause establishes the operational framework for information sharing across the Bank's business operations and establishes that data practices are governed by a separate Privacy Notice document rather than solely by this agreement. This structure allocates specific data governance mechanics to the incorporated Privacy Notice while the deposit agreement addresses the general authorization principle.

Recent Activity

This document changed recently

High Jul 12, 2026

The updated Deposit Agreement now explicitly discloses that disputes are subject to mandatory arbitration and class action waiver provisions, as stated prominently at the document's opening. The agreement establishes separate dispute resolution procedures for personal and business accounts and introduces new operational provisions governing account closure, jurisdiction and venue, cutoff times for legal orders, and responses to conflicting demands. The terms require that by using or maintaining your account after a change is effective, you agree to be bound by the updated provisions. You can review the complete updated agreement on bankofamerica.com or contact Bank of America directly if you wish to understand how the specific dispute resolution procedures apply to your account.

View change record →

Clause Stability Stable

0
Changes
5
Months Monitored
Apr 27, 2026
First Seen
Apr 27, 2026
Last Seen
This clause type exists across 4429 other provisions on other platforms.

Consumer impact (what this means for users)

The provision subjects customer information to disclosure to multiple categories of recipients (affiliates and non-affiliated third parties) across multiple stated purposes, with the specific parameters, limitations, and opt-out mechanisms defined in the Bank's Privacy Notice. Users of Online Banking are bound to comply with the data practices as described in the incorporated Privacy Notice document.

How other platforms handle this

Skillshare Medium

Protect us, our business, our users, and others, for example to enforce our terms of service, prevent spam or other unwanted communications, and investigate or protect against fraud

Squarespace Medium

we may use, retain or share information with law enforcement or others in circumstances where a person's vital interests require protection, such as in the case of emergencies.

Google Gemini Medium

The Gemini Apps Privacy Notice does not apply, and your Opal data, including feedback you provide, is processed per the Google Privacy Policy.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
We may share information about you and your account history with our affiliates and with non-affiliated third parties as permitted by law and described in our Privacy Notice. This includes sharing for purposes such as providing and improving services, marketing, and as required by law. By using Online Banking, you agree to the data practices described in our Privacy Notice, which is incorporated by reference into this Agreement.

Excerpt from Bank of America's Deposit Agreement

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Bank of America Deposit Agreement
Entity
Bank of America
Document last updated
May 5, 2026
Tracking information
First tracked
March 7, 2026
Last verified
May 10, 2026
Record ID
CA-P-003313
Document ID
CA-D-00053
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
3a84db97f26e6cc43ba57e3064c862f0c801f02c98b952132bcb7ba1add9a99c
Analysis generated
March 7, 2026 04:40 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Bank of America
Document: Bank of America Deposit Agreement
Record ID: CA-P-003313
Captured: 2026-03-07 04:40:52 UTC
SHA-256: 3a84db97f26e6cc4…
URL: https://conductatlas.com/platform/bank-of-america/bank-of-america-deposit-agreement/provision/CA-P-003313/data-sharing-and-privacy-practices/
Accessed: Aug. 19, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Bank of America's Data Sharing and Privacy Practices clause do?

The clause establishes the operational framework for information sharing across the Bank's business operations and establishes that data practices are governed by a separate Privacy Notice document rather than solely by this agreement. This structure allocates specific data governance mechanics to the incorporated Privacy Notice while the deposit agreement addresses the general authorization principle.

How does this clause affect you?

The provision subjects customer information to disclosure to multiple categories of recipients (affiliates and non-affiliated third parties) across multiple stated purposes, with the specific parameters, limitations, and opt-out mechanisms defined in the Bank's Privacy Notice. Users of Online Banking are bound to comply with the data practices as described in the incorporated Privacy Notice document.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 288 platforms. See the full comparison.

Is ConductAtlas affiliated with Bank of America?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bank of America.