Chase may require customers to enroll a trusted mobile device to access certain account services, payment functions, and wire transfers; enrollment may require submitting a photo of a government-issued ID and biometric data such as a selfie. Chase retains identity document images and biometric data to the extent permitted by applicable law.
This analysis describes what Chase's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The collection and retention of biometric data (selfie) and government-issued identity document images during trusted device enrollment implicates state biometric privacy statutes including the Illinois Biometric Information Privacy Act (BIPA) and similar laws in Texas and Washington. The agreement's retention limitation to 'the extent permitted by applicable law' does not specify retention periods or destruction timelines, which are required disclosures under BIPA and comparable statutes.
Interpretive note: The specific retention period and destruction schedule for biometric data and identity document images are not stated in the agreement text and are deferred to applicable law and the privacy policy, creating interpretive uncertainty about whether specific statutory requirements such as BIPA are fully addressed.
This provision authorizes Chase to collect biometric data and identity document images as part of trusted device enrollment, which may be required to access wire transfers, payments, and certain account services. The agreement states that identity document images will be stored only to the extent permitted by applicable law, but does not specify retention periods or destruction schedules in the agreement text.
Cross-platform context
See how other platforms handle Trusted Device Enrollment and Biometric Data Collection and similar clauses.
Compare across platforms →"To help protect your account, we may require that you use a trusted device to: Manage your account and/or digital profile, Access certain account services, Make certain payments and transfers, or Authorize or approve payments and transfers. A trusted device is an eligible device that has been successfully enrolled with us based on specific criteria we set and may modify from time to time in our sole discretion... During the process of making your eligible device a trusted device, we may require you to verify your identity and authenticate by taking certain actions, which may include, but are not limited to, one or more of the following: Taking a photo with your mobile phone camera of your acceptable form of identification; Entering information from your debit card (e.g., CVV), or Providing biometrics (e.g., selfie), or Using a token where available. Valid driver's licenses and state identifications qualify as acceptable forms of identification; additional qualifying forms of identification may be added by us periodically. The image of your identification will be stored or retained only to the extent permitted by applicable law and will be used as permitted under our privacy policy.Excerpt from Chase's Deposit Account Agreement
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The collection and retention of biometric data (selfie) and government-issued identity document images during trusted device enrollment implicates state biometric privacy statutes including the Illinois Biometric Information Privacy Act (BIPA) and similar laws in Texas and Washington. The agreement's retention limitation to 'the extent permitted by applicable law' does not specify retention periods or destruction timelines, which are required disclosures …
This provision authorizes Chase to collect biometric data and identity document images as part of trusted device enrollment, which may be required to access wire transfers, payments, and certain account services. The agreement states that identity document images will be stored only to the extent permitted by applicable law, but does not specify retention periods or destruction schedules in the …
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Chase.