Visa publishes a separate U.S. Social Security Number Policy and Sensitive Personal Information Statement governing its handling of Social Security numbers and other sensitive personal information categories for U.S. users.
This analysis describes what Visa's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The existence of a dedicated policy for Social Security numbers and sensitive personal information indicates that Visa collects and processes these data categories for at least some U.S. users, which triggers heightened obligations under multiple U.S. state privacy laws and the FTC's Safeguards Rule.
Interpretive note: The specific circumstances under which Visa collects Social Security numbers, the purposes for which they are used, and the retention and disposal practices are not described in this landing page and require review of the separate U.S. SSN Policy.
Under this provision, U.S. users whose Social Security numbers or other sensitive personal information are collected by Visa are subject to a separate policy statement governing those data categories; the specific handling practices, retention periods, and access controls for these categories are addressed in that separate document rather than in the Global Privacy Notice.
Cross-platform context
See how other platforms handle U.S. Social Security Number and Sensitive Personal Information Statement and similar clauses.
Compare across platforms →"U.S. - Social Security Number Policy and Sensitive Personal Information StatementExcerpt from Visa's Privacy Notice
(1) REGULATORY LANDSCAPE: Social Security number collection and use is governed by the FTC's Standards for Safeguarding Customer Information and by state-specific Social Security number protection statutes in jurisdictions including California, New York, and Illinois.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The existence of a dedicated policy for Social Security numbers and sensitive personal information indicates that Visa collects and processes these data categories for at least some U.S. users, which triggers heightened obligations under multiple U.S. state privacy laws and the FTC's Safeguards Rule.
Under this provision, U.S. users whose Social Security numbers or other sensitive personal information are collected by Visa are subject to a separate policy statement governing those data categories; the specific handling practices, retention periods, and access controls for these categories are addressed in that separate document rather than in the Global Privacy Notice.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Visa.