Gusto collects highly sensitive personal data including your Social Security number, bank account numbers, and health insurance information as part of delivering payroll and HR services.
This analysis describes what Gusto's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This data is among the most sensitive a company can hold; unauthorized exposure could enable identity theft, financial fraud, or discrimination.
The updated Privacy Policy now explicitly states it covers retirement account management (401k, SEP IRA, IRA accounts) and adds Stripe alongside Plaid as a third-party service provider that collects financial institution data. The policy restructures how it describes Gusto's role in different contexts: when Gusto acts as a service provider processing payroll or other data on behalf of employers, when it acts as an employer itself, or when it operates as a co-employer under a professional organization (PEO) arrangement, with separate privacy notices applying in each case. The policy introduces a new commitment that de-identified data will not be re-identified except to verify compliance with applicable law. If you connect a bank account through Stripe, that data will be treated under Stripe's Privacy Policy, which you should review separately.
View change record →The updated terms make explicit that using Gusto's background check service constitutes a binding agreement. Previously, the terms of the service relationship may have been less clearly stated. Now, the agreement clarifies that an authorized signatory represents they have authority to bind the organization, and that three actions trigger binding acceptance: checking a box, initiating a background check, or accessing the service. This means employers should ensure the person clicking through has actual authority to commit the organization to the full Background Check Customer Agreement before proceeding.
View change record →The updated terms now explicitly state that employers accept mandatory individual arbitration and waive the right to participate in class-action lawsuits or pursue relief in court with a jury trial. This significantly limits employers' ability to challenge Gusto's practices collectively or seek resolution through the court system. Any disputes employers have with Gusto must be resolved individually through arbitration, which typically involves private, binding proceedings with limited appeal options and discovery rights compared to court litigation.
View change record →Previous version had empty excerpt; current version now includes detailed enumeration of specific identifiers collected including SSN, driver's license, and passport numbers.
View full change record →If your employer uses Gusto, the platform holds your SSN, bank account details, salary history, and health insurance information, making the security and handling of this data directly relevant to your financial and personal safety.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visi...
We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us.
Monitoring
Gusto has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We collect the following categories of personal information: Identifiers such as your name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. Personal information categories listed in the California Customer Records statute such as name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.— Excerpt from Gusto's Gusto Privacy Policy
1) REGULATORY LANDSCAPE: Collection of Social Security numbers, financial account data, and health insurance information implicates the FTC Act (Section 5), GLBA for financial data, and potentially HIPAA if benefits data processing qualifies Gusto as a business associate. California Customer Records Act categories are explicitly referenced, engaging CCPA/CPRA and CPPA enforcement. State-level SSN protection laws in many jurisdictions impose additional handling and display restrictions. 2) GOVERNANCE EXPOSURE: High. The breadth of sensitive data categories collected, including government identifiers, financial account numbers, and medical/health insurance information, creates substantial breach notification obligations under state laws in all 50 states and potential regulatory enforcement exposure if security controls are deemed inadequate by the FTC or state attorneys general. 3) JURISDICTION FLAGS: California creates heightened exposure under CPRA's expanded sensitive personal information framework, which grants consumers specific rights regarding the use of SSNs, financial account data, and health data. Illinois BIPA is not directly implicated by these categories but employers with Illinois employees should assess biometric data separately. All U.S. jurisdictions have breach notification laws triggered by unauthorized access to SSNs and financial account numbers. 4) CONTRACT AND VENDOR IMPLICATIONS: Employers contracting with Gusto should confirm that Gusto's Data Processing Agreement adequately addresses subprocessor obligations for this sensitive data, including encryption standards, access controls, and breach notification timelines. The breadth of data collected may trigger enhanced vendor due diligence requirements under employer privacy programs. 5) COMPLIANCE CONSIDERATIONS: Legal teams should map all sensitive data categories against applicable state law definitions and ensure employee-facing privacy notices accurately describe Gusto's collection scope. Organizations with HIPAA obligations should assess whether health insurance information flowing through Gusto requires a Business Associate Agreement.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This data is among the most sensitive a company can hold; unauthorized exposure could enable identity theft, financial fraud, or discrimination.
If your employer uses Gusto, the platform holds your SSN, bank account details, salary history, and health insurance information, making the security and handling of this data directly relevant to your financial and personal safety.
ConductAtlas has identified this type of provision across 8 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Gusto.