Visa · Visa Privacy Notice

Data Retention

Medium severity
Share 𝕏 Share in Share

What it is

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements, or to resolve disputes.

Why it matters

Indefinite or open-ended data retention means Visa could hold detailed records of your financial transactions for years, increasing the risk of data breaches and limiting your ability to have your data fully deleted.

Consumer impact

Visa collects extensive personal information including transaction history, device identifiers, geolocation, and inferred consumer preferences, and shares this data with issuing banks, merchant acquirers, service providers, and analytics partners. Because Visa operates as a back-end network processor, consumers generally cannot negotiate or limit these practices through their card agreements — their exposure is largely invisible. You can submit a California Consumer Privacy Act rights request, including an opt-out of data sharing, through Visa's online privacy request portal at https://usa.visa.com/legal/privacy-policy.html.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Submit a data deletion request through Visa's Privacy Center at the link above. Note that Visa may retain data for legal, accounting, or dispute resolution purposes even after a deletion request — you can ask Visa to specify which data it is retaining and why.

Applicable agencies

  • FTC
    The FTC enforces GLBA disposal rules (16 C.F.R. Part 682) and Section 5 of the FTC Act against deceptive or inadequate data retention and disposal practices by financial services companies.
    File a complaint →

Provision details

Document information
Document
Visa Privacy Notice
Entity
Visa
Document last updated
March 24, 2026
Tracking information
First tracked
March 15, 2026
Last verified
April 4, 2026
Record ID
CA-P-002249
Document ID
CA-D-00114
Evidence Provenance
Source URL
Wayback Machine
SHA-256
e2841c6b02d9354b6ac5071186562d1349532f2e637fe837ed27dbb4b45baa9f
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Visa | Document: Visa Privacy Notice | Record: CA-P-002249
Captured: 2026-03-15 11:56:42 UTC | SHA-256: e2841c6b02d9354b…
URL: https://conductatlas.com/platform/visa/visa-privacy-notice/data-retention/
Accessed: April 5, 2026
Classification
Severity
Medium
Categories

Other provisions in this document