Gusto collects your most sensitive personal information — including your Social Security number, bank account details, salary, and tax records — as part of running payroll and HR services for your employer.
This provision consolidates multiple high-risk data categories (SSN, financial accounts, tax records) into a single high-severity provision with specific enumeration of sensitive data types.
View full change record →Employees who use Gusto through their employer have their SSN, bank account numbers, salary, and health information held by Gusto — data categories that carry the highest risk of harm if disclosed to unauthorized parties.
Cross-platform context
See how other platforms handle Collection of Sensitive Financial and Payroll Data and similar clauses.
Compare across platforms →This data is among the most sensitive that exists; if misused, disclosed, or breached, it can result in identity theft, financial fraud, and tax fraud directly affecting individual employees.
(1) REGULATORY FRAMEWORK: Collection and processing of SSNs, bank account data, and payroll records engages the Gramm-Leach-Bliley Act (GLBA, 15 U.S.C. §6801 et seq.) enforced by the FTC, requiring privacy notices and safeguards. Health benefits data may trigger HIPAA (45 CFR Parts 160, 164) if Gusto qualifies as a business associate. CCPA/CPRA (Cal. Civ. Code §1798.140) classifies SSNs and financial account numbers as 'sensitive personal information' subject to enhanced disclosure, opt-out, and use limitation rights, enforced by the CPPA. FTC Act Section 5 prohibits unfair or deceptive data security practices. (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.