Gusto's privacy policy explains how it collects and uses your personal information when you or your employer uses Gusto for payroll, HR, and benefits. It covers a wide range of sensitive data including your Social Security number, bank account details, health information, and pay history. You have rights to access, delete, or correct your data, and California residents and residents of several other states have additional legal protections.
Gusto's Privacy Policy governs the collection, use, storage, and disclosure of personal information for users of its HR, payroll, and benefits platform. The policy covers multiple data categories including financial data, government-issued identifiers, health information, and biometric data, collected from both employer-administrators and employees/contractors who are end-users of the platform. Key obligations include disclosures required under CCPA/CPRA for California residents (right to know, delete, correct, and opt out of sale/sharing), state-specific privacy rights for Virginia, Colorado, Connecticut, Texas, Montana, and other states, and obligations arising from Gusto's role processing payroll and benefits data. Notable provisions include the collection of sensitive personal information (SSNs, financial account numbers, health data), data sharing with third-party service providers and marketing partners, use of cookies and tracking technologies, and retention of data even after account closure for legal and regulatory purposes.
Gusto's Privacy Policy engages with CCPA/CPRA, Virginia CDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA, Montana CDPA, and potentially HIPAA (for health and benefits data processing). Compliance t…
Gusto's Privacy Policy engages with CCPA/CPRA, Virginia CDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA, Montana CDPA, and potentially HIPAA (for health and benefits data processing). Compliance teams should note that Gusto acts as both a data controller and a service provider/processor dependin…
Compliance intelligence locked
Regulatory exposure, material risk, and due diligence action items.