Chase may obtain information about you from outside sources including credit bureaus, marketing firms, and social media platforms, and may combine that information with what it already knows about you.
This analysis describes what Chase's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Chase's data profile on you may be enriched by information from credit bureaus, social media companies, and marketing data brokers, which can significantly expand the scope of information Chase holds and uses for decisions affecting your financial relationship.
Chase may combine your financial account data with information purchased or received from external data sources including marketing companies and social media platforms, potentially creating a more detailed profile used for credit decisions, marketing targeting, or risk assessments than you might expect from a banking relationship alone.
How other platforms handle this
When you visit the Careers portion of our websites, we collect the information that you provide to us in connection with your job application. This includes but is not limited to business and personal contact information, professional credentials and skills, educational and work history and other in...
American does not knowingly collect personal information directly from children – persons under the age of 13, or another age if required by applicable law – other than when required to comply with the law or for safety and security reasons. Due to the nature of our Services, we may collect travel i...
We may collect information about your location, including precise geolocation information, when you use our Services. We use this information to provide location-based services, such as showing you products available in your area, and for other purposes described in this Privacy Policy.
Monitoring
Chase has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We may collect information about you from third parties, such as credit bureaus, marketing companies, and social media companies. We may combine information about you that we have gathered with information about you that we have collected from third parties.— Excerpt from Chase's Chase Privacy Notice
REGULATORY LANDSCAPE: The collection and combination of third-party data including credit bureau information engages the Fair Credit Reporting Act for credit-related uses, enforced by the CFPB and FTC. The use of social media and marketing company data for combining with financial profiles engages FTC Act Section 5 and applicable state privacy laws regarding data enrichment and profiling. CCPA/CPRA requires disclosure of categories of personal information collected from third parties and the sources from which it is collected. GOVERNANCE EXPOSURE: Medium. The combination of internally collected financial data with externally sourced marketing and social media data creates a broad consumer profile. Governance teams should evaluate whether data enrichment practices comply with FCRA permissible purpose requirements when credit bureau data is involved, and whether third-party data sources are disclosed with sufficient specificity to satisfy CCPA/CPRA transparency requirements. JURISDICTION FLAGS: California residents have CCPA/CPRA rights to know the categories of personal information collected from third parties and the sources. FCRA applies nationally to credit bureau data regardless of state. Data enrichment using social media data may engage FTC guidance on sensitive data practices and state consumer protection frameworks in multiple jurisdictions. CONTRACT AND VENDOR IMPLICATIONS: Contracts with credit bureaus, marketing data providers, and social media companies from which Chase purchases or receives personal information should include representations that the data was lawfully collected and transferred. Procurement teams should assess whether third-party data providers maintain CCPA/CPRA-compliant data sale disclosures and whether Chase's onward use of purchased data is consistent with original collection purposes. COMPLIANCE CONSIDERATIONS: Compliance teams should inventory all third-party data sources contributing to consumer profiles and confirm that the policy's disclosure of source categories is accurate and complete. FCRA permissible purpose requirements should be reviewed whenever credit bureau data is combined with non-credit data for marketing or product eligibility purposes. Data mapping should document the flow and combination of third-party data to support consumer rights request responses under CCPA/CPRA.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Chase's data profile on you may be enriched by information from credit bureaus, social media companies, and marketing data brokers, which can significantly expand the scope of information Chase holds and uses for decisions affecting your financial relationship.
Chase may combine your financial account data with information purchased or received from external data sources including marketing companies and social media platforms, potentially creating a more detailed profile used for credit decisions, marketing targeting, or risk assessments than you might expect from a banking relationship alone.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Chase.