California residents have significantly stronger privacy protections than consumers in other states, including the right to delete their financial data and opt out of data sales — rights that do not exist under federal GLBA law alone.
Consumer impact
Bank of America collects highly sensitive financial data including your Social Security number, account balances, transaction history, and credit information, and shares this data with affiliated companies and nonaffiliates for marketing purposes without requiring your prior consent. Federal law limits but does not eliminate this sharing, meaning some data flows to third parties unless you actively opt out. You can limit marketing-related data sharing by calling 1-888-341-5000 or visiting the Bank of America privacy choices page to submit an opt-out request.
What you can do
⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
Delete Your Data
Within 45 days
California residents should navigate to the Bank of America privacy page and locate the CCPA rights request form. Submit your request for data deletion or access, and Bank of America is required to respond within 45 days under CCPA.
Applicable agencies
State Attorney General
State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
ConductAtlas Policy Archive
Entity: Bank of America | Document: Bank of America Privacy Notice | Record: CA-P-000468
Captured: 2026-03-06 19:33:25 UTC | SHA-256: 0579b728c8274563…
URL: https://conductatlas.com/platform/bank-of-america/bank-of-america-privacy-notice/california-ccpa-rights/
Accessed: April 4, 2026