Federal law requires Bank of America to send you this privacy notice annually and to tell you about your rights to limit certain types of data sharing.
You should receive this privacy notice at least once a year; if you stop receiving it or notice material changes, this may indicate a compliance gap or a change in data practices worth investigating.
Cross-platform context
See how other platforms handle Annual Privacy Notice Delivery Obligation and similar clauses.
Compare across platforms →The annual notice requirement ensures consumers are regularly informed of their data rights, but the notice's complexity means many consumers may not understand or act on the opt-out rights available to them.
REGULATORY FRAMEWORK: GLBA 15 U.S.C. §6803 and implementing regulations (12 CFR Part 1016.5–1016.9) require annual delivery of privacy notices to all consumers with whom the institution has a continuing customer relationship. The FAST Act of 2015 (15 U.S.C. §6803(e)) created an exception to annual notice delivery if (1) no changes have been made to the notice and (2) the institution shares personal information only under GLBA exceptions not requiring opt-out. Enforcement is by CFPB, OCC, and other prudential regulators.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.