Bank of America can share your personal financial information with companies it does not own or control so those companies can market products to you, but you have the right to opt out of this sharing.
This analysis describes what Bank of America's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision means your financial data can reach companies outside the Bank of America corporate family for marketing purposes unless you actively exercise your opt-out right.
If you do not opt out, third-party companies outside Bank of America's corporate family may receive your personal financial information and use it to market products or services to you.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...
Monitoring
Bank of America has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Reasons we can share your personal information: For nonaffiliates to market to you. Does Bank of America share? Yes. Can you limit this sharing? Yes.— Excerpt from Bank of America's Bank of America Privacy Notice
REGULATORY LANDSCAPE: Sharing personal financial information with nonaffiliated third parties for their marketing purposes is subject to Regulation P opt-out requirements under GLBA. The CFPB enforces these requirements and has established standards for how opt-out notices must be delivered and honored. The FTC may also have jurisdiction over deceptive or unfair practices related to third-party data sharing. GOVERNANCE EXPOSURE: High. Nonaffiliate marketing sharing creates the greatest third-party data exposure for consumers and the most significant regulatory scrutiny risk. Failure to honor opt-out elections or to provide adequate notice of this sharing category would constitute a Regulation P violation. JURISDICTION FLAGS: California residents have heightened rights under CCPA, which may require affirmative consent (opt-in) for certain categories of data sharing with nonaffiliated parties, and under CFIPA for financial information specifically. The interaction between GLBA opt-out and CCPA opt-in frameworks requires careful legal analysis for California customer populations. CONTRACT AND VENDOR IMPLICATIONS: Contracts with nonaffiliated marketing partners should include data use restrictions limiting use to the disclosed marketing purposes and requiring compliance with applicable privacy laws. Procurement teams should audit whether these agreements include appropriate data processing and deletion obligations. COMPLIANCE CONSIDERATIONS: Compliance teams should maintain a current list of nonaffiliated marketing partners receiving consumer data, audit opt-out request processing timelines, and confirm that California-specific notice and consent mechanisms are separately maintained and consistent with CCPA requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision means your financial data can reach companies outside the Bank of America corporate family for marketing purposes unless you actively exercise your opt-out right.
If you do not opt out, third-party companies outside Bank of America's corporate family may receive your personal financial information and use it to market products or services to you.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bank of America.