If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what data is collected, request deletion of your data, and opt out of the sale of your personal information.
This analysis describes what Bank of America's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause operationalizes Bank of America's CCPA compliance obligations by defining permissible information-sharing categories and restricting external disclosure. It establishes the bank's consent-based sharing model and creates a framework for limiting affiliate data exchange consistent with California statutory requirements.
California residents can exercise CCPA rights to access, delete, or restrict use of their personal information held by Bank of America, providing materially stronger control over their financial data than federal law alone affords.
How other platforms handle this
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
"California: Under California law, we will not share information we collect about you with companies outside of Bank of America, unless the law allows. For example, we may share information with your consent, to service your accounts, or to provide rewards or benefits you are entitled to. We will limit sharing among our companies to the extent required by California law.Excerpt from Bank of America's Privacy Notice
CCPA compliance for financial institutions requires a layered approach given the partial GLBA exemption — data not covered by GLBA's privacy provisions (e.g., online behavioral data, marketing profiles) remains fully subject to CCPA; compliance teams …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This clause operationalizes Bank of America's CCPA compliance obligations by defining permissible information-sharing categories and restricting external disclosure. It establishes the bank's consent-based sharing model and creates a framework for limiting affiliate data exchange consistent with California statutory requirements.
California residents can exercise CCPA rights to access, delete, or restrict use of their personal information held by Bank of America, providing materially stronger control over their financial data than federal law alone affords.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bank of America.