Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy discloses that Verizon collects biometric identifiers including voice recordings and voiceprints, along with Social Security Numbers, driver's license numbers, and payment information from customers.
This analysis describes what Verizon's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that Verizon's data collection scope includes categories of sensitive personal information, specifically biometric identifiers and government-issued identification numbers, that are subject to heightened protection requirements under multiple state laws including Illinois BIPA, Texas CUBI, and California CPRA.
The agreement establishes that Verizon collects voice recordings, voiceprints, and other biometric identifiers as part of standard customer data practices. Under applicable state biometric privacy laws, consumers in Illinois, Texas, Washington, and other jurisdictions may have specific rights regarding collection, retention, and deletion of this data category.
Cross-platform context
See how other platforms handle Biometric and Sensitive Identifier Collection and similar clauses.
Compare across platforms →Monitoring
Verizon has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"This includes your name, address, email, phone numbers where you can be reached, images, voice recordings or voiceprints, other biometric identifiers, date of birth, driver's license number, Social Security Number or Tax Identifier, username and password and payment information.Excerpt from Verizon's Privacy Policy
(1) REGULATORY LANDSCAPE: This provision engages the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), the Washington My Health MY Data Act, and the California Privacy Rights Act's sensitive personal information framework. The FTC's enforcement authority over unfair or deceptive practices is also implicated. Collection of Social Security Numbers and driver's license numbers engages state data breach notification laws that treat these identifiers as requiring heightened protection. (2) GOVERNANCE EXPOSURE: High. The collection of voiceprints and voice recordings as biometric identifiers creates material compliance exposure in Illinois and Texas, where informed written consent and published retention schedules are required before biometric data collection. The policy does not include a biometric-specific retention schedule or written consent mechanism disclosure, which may create tension with BIPA's requirements for Illinois residents. (3) JURISDICTION FLAGS: Illinois residents have a private right of action under BIPA for unconsented biometric data collection, with statutory damages of $1,000 to $5,000 per violation. Texas and Washington create additional state AG enforcement exposure. California CPRA requires that sensitive personal information including biometric data be subject to specific use limitations and a right to limit use. Collection of SSNs triggers heightened breach notification obligations in all fifty states. (4) CONTRACT AND VENDOR IMPLICATIONS: Service providers who receive biometric data from Verizon are stated to be required to protect and use information only for permitted purposes, but the policy does not specify biometric-specific contractual requirements in its public-facing disclosure. Procurement teams should assess whether vendor agreements include BIPA-compliant data processing addenda. (5) COMPLIANCE CONSIDERATIONS: Legal teams should evaluate whether current consent mechanisms satisfy BIPA's written consent requirement for Illinois customers whose voice interactions are recorded and retained as voiceprints, whether a biometric data retention and destruction policy has been published as required by BIPA, and whether California sensitive personal information opt-out rights are operationally implemented for biometric data categories.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes that Verizon's data collection scope includes categories of sensitive personal information, specifically biometric identifiers and government-issued identification numbers, that are subject to heightened protection requirements under multiple state laws including Illinois BIPA, Texas CUBI, and California CPRA.
The agreement establishes that Verizon collects voice recordings, voiceprints, and other biometric identifiers as part of standard customer data practices. Under applicable state biometric privacy laws, consumers in Illinois, Texas, Washington, and other jurisdictions may have specific rights regarding collection, retention, and deletion of this data category.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Verizon.