California residents are directed to a separate California Consumer Privacy Notice that may provide additional rights beyond what this federal GLBA notice covers.
This analysis describes what Bank of America's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The clause establishes an informational obligation to California residents by acknowledging potential additional statutory rights and providing a mechanism for accessing jurisdiction-specific privacy disclosures, thereby creating a documented reference structure for state-law compliance.
Interpretive note: The document references a separate California Consumer Privacy Notice without reproducing its contents; the full scope of California rights available is not determinable from this document alone.
If you are a California resident, you may have rights under the CCPA including the right to know what personal information is collected, the right to request deletion, and the right to opt out of certain data uses, but you must consult the separate California Consumer Privacy Notice to understand those rights fully.
Cross-platform context
See how other platforms handle California Residents Supplemental Rights and similar clauses.
Compare across platforms →Monitoring
Bank of America has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"For California residents: If you are a California resident, you may have additional privacy rights under California law. Please see our California Consumer Privacy Notice for more information.— Excerpt from Bank of America's Bank of America Privacy Notice
REGULATORY LANDSCAPE: California residents are subject to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. The California Financial Information Privacy Act (CFIPA) may also apply to financial data sharing. GLBA provides limited preemption of state privacy laws but does not fully preempt CCPA for data uses beyond the GLBA's defined exceptions. GOVERNANCE EXPOSURE: High for California-specific compliance. The interaction between GLBA and CCPA is a complex and evolving area of law. If the bank's California-specific notice does not adequately address CCPA rights including the right to know, delete, and limit sensitive personal information use, the bank may face enforcement action from the CPPA or California AG. JURISDICTION FLAGS: This provision applies exclusively to California residents. Compliance teams should ensure that the California Consumer Privacy Notice is current, consistent with this federal notice, and accessible. Any discrepancies between the two notices regarding data practices could create enforcement exposure. CONTRACT AND VENDOR IMPLICATIONS: Vendor agreements should address CCPA-specific data processing obligations for California resident data, including data subject request workflows, deletion obligations, and restrictions on selling or sharing personal information as defined under CCPA. COMPLIANCE CONSIDERATIONS: Legal teams should maintain a current California-specific privacy notice, audit whether all data flows disclosed in the federal GLBA notice are also adequately disclosed under CCPA standards, and ensure that California consumer rights requests (know, delete, correct, limit) are operationally supported and responded to within CCPA-required timeframes.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
The clause establishes an informational obligation to California residents by acknowledging potential additional statutory rights and providing a mechanism for accessing jurisdiction-specific privacy disclosures, thereby creating a documented reference structure for state-law compliance.
If you are a California resident, you may have rights under the CCPA including the right to know what personal information is collected, the right to request deletion, and the right to opt out of certain data uses, but you must consult the separate California Consumer Privacy Notice to understand those rights fully.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bank of America.