T-Mobile collects biometric information and other sensitive personal data categories, including financial information, health-adjacent data, and precise geolocation, subject to heightened protections under applicable law.
Biometric and sensitive data are among the most protected categories of personal information under state laws, and their collection by a major carrier creates significant privacy and security risks if mishandled.
Biometric data collection triggers requirements under Illinois BIPA, Texas CUBI, and Washington My Health MY Data Act, in addition to CPRA sensitive data protections; compliance teams should assess whether T-Mobile's biometric data handling includes required written consent, retention schedules, and destruction policies under each applicable state statute.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
T-Mobile collects extensive personal data including precise geolocation, network browsing activity, CPNI, biometric data, and financial information, and uses it for targeted advertising as well as sharing with affiliates, partners, and third-party data brokers. Consumers' data may be sold or shared in ways that affect their privacy and financial profile, and some data sharing persists even after account cancellation due to legal retention obligations. You can opt out of T-Mobile's Advertising & Analytics program and request deletion of your personal data by visiting https://www.t-mobile.com/privacy-center.