What can I do about this clause?

{'method': 'EMAIL', 'recipient': 'Webull privacy contact (see privacy policy for current email)', 'difficulty': 'MODERATE', 'action_type': 'DELETE_DATA', 'instructions': "Submit a written data deletion request to Webull's privacy contact email requesting deletion of your personal and financial data. Specify the categories of data you want deleted and provide your account information for verification.", 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'CFPB', 'reason': 'The CFPB has oversight over financial data privacy practices of broker-dealers and financial service providers collecting sensitive consumer financial information.', 'complaint_url': 'https://www.consumerfinance.gov/complaint/'}, {'agency': 'FTC', 'reason': "The FTC enforces against unfair or deceptive data collection and security practices under Section 5 of the FTC Act, applicable to Webull's collection of sensitive personal and financial data.", 'complaint_url': 'https://reportfraud.ftc.gov/'}

What is the severity of this clause?

ConductAtlas classifies this Collection of Sensitive Financial and Identity Data clause as high severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Collection of Sensitive Financial and Identity Data — Webull

Share 𝕏 Share in Share 🔒 PDF

What it is

Webull collects highly sensitive personal and financial data including your Social Security number, government ID, bank account details, and financial history when you sign up and use the platform.

Consumer impact (what this means for users)

Your Social Security number, government-issued ID, bank account information, and full financial profile are collected by Webull and stored on their systems, creating substantial risk if this data is mishandled or disclosed to unauthorized parties.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Delete Your Data

Submit a written data deletion request to Webull's privacy contact email requesting deletion of your personal and financial data. Specify the categories of data you want deleted and provide your account information for verification.

Cross-platform context

See how other platforms handle Collection of Sensitive Financial and Identity Data and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

The breadth of sensitive data collected — including SSN, government ID, and bank details — means a data breach or unauthorized sharing could expose users to identity theft, financial fraud, and significant personal harm.

View original clause language

We collect information you provide directly to us, such as when you create an account, make a transaction, or contact us for support. This information may include your name, email address, postal address, phone number, date of birth, Social Security number, government-issued identification, tax identification information, bank account information, investment experience and objectives, and other financial information.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: Collection of Social Security numbers, government IDs, and bank account data implicates FinCEN KYC/AML requirements under 31 U.S.C. §5318 and 31 CFR Part 1023 (broker-dealer AML program requirements). Regulation S-P (17 CFR Part 248) requires safeguarding of nonpublic personal information (NPI) collected by broker-dealers. CCPA/CPRA (Cal. Civil Code §1798.140) classifies SSNs, government IDs, and financial account numbers as 'sensitive personal information' subject to heightened use restrictions. GDPR Art. 9 and Art. 6 apply to any EU-resident users, requiring explicit lawful basis for processing special categories. Enforcement authority: SEC, FINRA, FinCEN, California Privacy Protection Agency (CPPA), FTC.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

CFPB

The CFPB has oversight over financial data privacy practices of broker-dealers and financial service providers collecting sensitive consumer financial information.
File a complaint →
FTC

The FTC enforces against unfair or deceptive data collection and security practices under Section 5 of the FTC Act, applicable to Webull's collection of sensitive personal and financial data.
File a complaint →

Provision details

Document information

Document

Webull Privacy Policy

Entity

Webull

Document last updated

April 29, 2026

Tracking information

First tracked

April 28, 2026

Last verified

April 28, 2026

Record ID

CA-P-003959

Document ID

CA-D-00057

Evidence Provenance

Source URL

https://www.webull.com/protocol/webull_privacy_policy

Wayback Machine

View archived versions →

SHA-256

52ce27ebbc3f44e8211fd1b42bcf95b713a9bb02589393332f68453da894ec75

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Webull | Document: Webull Privacy Policy | Record: CA-P-003959
Captured: 2026-04-28 09:34:31 UTC | SHA-256: 52ce27ebbc3f44e8…
URL: https://conductatlas.com/platform/webull/webull-privacy-policy/collection-of-sensitive-financial-and-identity-data/
Accessed: May 2, 2026

Classification

Severity

High

Collection of Sensitive Financial and Identity Data