Bank of America · Bank of America Privacy Notice · View original document ↗

Collection of Sensitive Financial Data

High severity Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Bank of America Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Bank of America collects highly sensitive personal information including your Social Security number, employment information, account balances, transaction history, credit information, assets, and investment experience.

This analysis describes what Bank of America's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

The specification of these data categories establishes the scope of sensitive personal and financial information subject to the bank's data handling, retention, and disclosure practices outlined in the broader privacy notice. This enumeration defines what constitutes account and customer information within the bank's operational framework.

Consumer impact (what this means for users)

Bank of America holds some of the most sensitive categories of personal information possible, including government identifiers and complete financial histories, which are then subject to various sharing practices described in this notice.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Export Your Data
    Visit Bank of America's privacy page and submit a data access request to understand what personal information is held about you. California residents can use the CCPA request form available on the privacy page.

How other platforms handle this

Roblox Medium

Your use of the Services is also governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Services, you consent to the data collection and use practices described in the Privacy Policy. Roblox collects information you provide directly, information collected a...

Best Buy Medium

We collect information about you in a variety of ways depending on how you interact with us and our products and services. This includes information you provide directly, information we collect automatically when you use our services, and information we receive from third parties. We may collect ide...

Tabnine Medium

Tabnine may collect and use technical data and related information, including but not limited to technical information about your device, system and application software, and usage data regarding your use of the Services (including code completion statistics and plugin interaction data), to facilita...

See all platforms with this clause type →

Monitoring

Bank of America has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
This information can include: Social Security number and employment information; account balances, transaction history and credit information; assets and investment experience.

— Excerpt from Bank of America's Bank of America Privacy Notice

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

The collection of Social Security numbers alongside detailed financial and investment data triggers heightened regulatory obligations under GLBA, FCRA, and state-level data protection statutes; organizations conducting due diligence should assess Bank of America's data minimization practices and breach notification protocols.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • Consumer Financial Protection Bureau (cfpb)
    Regulates consumer financial products and services. Can investigate companies for unfair, deceptive, or abusive financial practices including improper fees, billing errors, and data misuse.
    Who can file: Anyone who has used a consumer financial product or service in the US
    What you need: Account number or details, dates of transactions or events, description of the issue, and any supporting documents
    What to expect: The company must respond within 15 days. The CFPB forwards your complaint and may use it in enforcement actions. Individual compensation is possible in some cases.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FCRA
United States Federal
FTC Act Section 5
United States Federal
GLBA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
TCPA
United States Federal
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Bank of America Privacy Notice
Entity
Bank of America
Document last updated
May 5, 2026
Tracking information
First tracked
March 6, 2026
Last verified
March 9, 2026
Record ID
CA-P-000467
Document ID
CA-D-00054
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
0579b728c8274563edb0567013330303ccd10cd282e63b0f72de6678becec2d3
Analysis generated
March 6, 2026 19:33 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Bank of America
Document: Bank of America Privacy Notice
Record ID: CA-P-000467
Captured: 2026-03-06 19:33:25 UTC
SHA-256: 0579b728c8274563…
URL: https://conductatlas.com/platform/bank-of-america/bank-of-america-privacy-notice/collection-of-sensitive-financial-data/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Bank of America's Collection of Sensitive Financial Data clause do?

The specification of these data categories establishes the scope of sensitive personal and financial information subject to the bank's data handling, retention, and disclosure practices outlined in the broader privacy notice. This enumeration defines what constitutes account and customer information within the bank's operational framework.

How does this clause affect you?

Bank of America holds some of the most sensitive categories of personal information possible, including government identifiers and complete financial histories, which are then subject to various sharing practices described in this notice.

Is ConductAtlas affiliated with Bank of America?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bank of America.