Bank of America can share your personal financial information with companies it does not own or control so those companies can market products to you, but you have the right to opt out of this sharing.
This analysis describes what Bank of America's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational framework under which Bank of America processes personal information for third-party marketing purposes and identifies consumer control mechanisms. The availability of an opt-out option creates a conditional authorization structure rather than an unconditional data-sharing mandate.
If you do not opt out, third-party companies outside Bank of America's corporate family may receive your personal financial information and use it to market products or services to you.
How other platforms handle this
Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, delete, or port your data, the right to restrict or object to processing, and where processing is based on consent, the right to withdraw consent at any time. California resi...
If you are located in the European Economic Area or the United Kingdom, you have certain rights with respect to your personal information under applicable data protection law, including the right to access, rectify, or erase your personal information; the right to restrict or object to processing; a...
Gemini apps aren't available for children under 13. In some countries, Gemini apps may not be available for users who are minors under the law of their country.
Monitoring
Bank of America has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Reasons we can share your personal information: For nonaffiliates to market to you. Does Bank of America share? Yes. Can you limit this sharing? Yes.— Excerpt from Bank of America's Bank of America Privacy Notice
REGULATORY LANDSCAPE: Sharing personal financial information with nonaffiliated third parties for their marketing purposes is subject to Regulation P opt-out requirements under GLBA. The CFPB enforces these requirements and has established standards for how opt-out notices must be delivered and honored. The FTC may also have jurisdiction over deceptive or unfair practices related to third-party data sharing. GOVERNANCE EXPOSURE: High. Nonaffiliate marketing sharing creates the greatest third-party data exposure for consumers and the most significant regulatory scrutiny risk. Failure to honor opt-out elections or to provide adequate notice of this sharing category would constitute a Regulation P violation. JURISDICTION FLAGS: California residents have heightened rights under CCPA, which may require affirmative consent (opt-in) for certain categories of data sharing with nonaffiliated parties, and under CFIPA for financial information specifically. The interaction between GLBA opt-out and CCPA opt-in frameworks requires careful legal analysis for California customer populations. CONTRACT AND VENDOR IMPLICATIONS: Contracts with nonaffiliated marketing partners should include data use restrictions limiting use to the disclosed marketing purposes and requiring compliance with applicable privacy laws. Procurement teams should audit whether these agreements include appropriate data processing and deletion obligations. COMPLIANCE CONSIDERATIONS: Compliance teams should maintain a current list of nonaffiliated marketing partners receiving consumer data, audit opt-out request processing timelines, and confirm that California-specific notice and consent mechanisms are separately maintained and consistent with CCPA requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational framework under which Bank of America processes personal information for third-party marketing purposes and identifies consumer control mechanisms. The availability of an opt-out option creates a conditional authorization structure rather than an unconditional data-sharing mandate.
If you do not opt out, third-party companies outside Bank of America's corporate family may receive your personal financial information and use it to market products or services to you.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bank of America.