U.S. Online Privacy Notice

DATED 2024-03-01 · VERSION 20240402_rev01 · COMPARED WITH 20231202_rev01 · ARCHIVE SNAPSHOT

Full text changes — 20231202_rev01 to 20240402_rev01

COLOUR MARKS THE SEVERITY OF A FLAGGED CLAUSE · + AND − MARK ADDED AND REMOVED

11## Bank of America U.S. Online Privacy Notice
22
3Last updated September 29, 2023
3Last updated March 1, 2024
44
55Your privacy is important to us. We conduct regular assessment reviews and abide by rigorous privacy standards to ensure personal information we collect, use and share is protected. This U.S. Online Privacy Notice ("Notice") describes how Bank of America and our affiliates manage personal information about you when you interact with us online through our websites, event registration sites, mobile applications and social sites ("Sites and Mobile Apps") through your computer, smartphone, tablet or other mobile devices ("computer or mobile devices").
66
77### This Notice explains
88
99- How we collect personal information when you visit, use or interact with us online, and through our ads displayed through online services operated by us or non-affiliated third parties.
2828We may provide links to non-affiliated third-party sites, such as credit bureaus, service providers or merchants. If you follow links to sites not affiliated with, or controlled by Bank of America, you should review their privacy and security policies and other terms and conditions, as they may be different from those of our Sites and Mobile Apps. Bank of America does not guarantee and is not responsible for the privacy or security of these sites, including the accuracy, completeness or reliability of their information.
2929
3030#### Protecting your personal information
3131
3232To protect personal information from unauthorized access and use, we use security measures that comply with applicable federal and state laws. These measures may include device safeguards and secured files and buildings as well as oversight of our third-party providers to ensure personal information remains confidential and secure. In the event of a data breach, we provide timely notification, in accordance with applicable laws and regulations.
3333
34We also recognize the importance of protecting privacy where children are involved. Our Sites and Mobile Apps are not marketed to individuals under the age of 13, and we request that these individuals do not provide personal information through our Sites and Mobile Apps. We do not knowingly collect personal information from children under 13.
34We recognize the importance of protecting privacy where children are involved. Our Sites and Mobile Apps are not marketed to individuals under the age of 13. Accounts that include online access for children under the age of 13 are owned by a parent or guardian and require specific consent for online access. We do not knowingly collect personal information from children under 13 without prior parental consent. Read our [Children's Privacy Policy](https://www.bankofamerica.com/online-banking/childrens-privacy-policy/) for more information.
3535
3636#### Making sure personal information is accurate
3737
3838Keeping your personal information accurate and up to date is very important. If your personal information is incomplete, inaccurate or not current, please use the **Contact Us** option on our Sites and Mobile Apps, or call or write to us at the telephone numbers or appropriate address for changes listed on your account statements, records, online or other account materials. You can also speak to a customer representative at a financial center, your Financial Advisor or account representative.
3939
4040### Personal Information We Collect Online
134134
135135- **Advertising on our sites, mobile apps and off-line channels such as financial centers, call centers, and through direct marketing (for example email, mail, phone):** We may use personal information about your activities on our Sites and Mobile Apps, such as pages visited and key words entered, to help determine which of our ads or offers may be of interest to you. We may use personal information about your relationship with us (such as types of accounts, transactional information or the location in which you bank) to help determine which advertisements or offers to present to you.
136136- **Advertising on non-affiliated third-party sites and mobile apps:** Bank of America contracts with advertising companies to advertise our products and services on sites and mobile apps not affiliated with us. We may use personal information we have collected or that you have provided to assist our non-affiliated third-party sites and mobile apps to select bank ads or offers that may appeal to you, display them to you and monitor your responses. Non-affiliated third-party sites and mobile apps are not subject to Bank of America Privacy Notices.
137137
138138#### How you can opt out of Online Behavioral Advertising
139139
140- **Advertising on Non-Affiliated Third-Party sites:** Bank of America participates in the Digital Advertising Alliance ("DAA") self-regulatory Principles for Online Behavioral Advertising and uses the Advertising Options Icon on our behavioral ads on non-affiliated third-party sites (excluding ads appearing on platforms that do not accept the icon). Ads served on our behalf by these companies do not contain unencrypted personal information and we limit the use of personal information by companies that serve our ads. To learn more about ad choices, or to opt out of interest-based advertising with non-affiliated third-party sites, visit [YourAdChoices layer](https://www.aboutads.info/choices/) powered by the Digital Advertising Alliance or through the [Network Advertising Initiative's Opt-Out Tool layer](https://www.networkadvertising.org/choices). You may also visit the individual sites for additional information on their data and privacy practices and opt out-options.
140- **Advertising on Non-Affiliated Third-Party sites:** Bank of America participates in the Digital Advertising Alliance ("DAA") self-regulatory Principles for Online Behavioral Advertising and uses the Advertising Options Icon on our behavioral ads on non-affiliated third-party sites (excluding ads appearing on platforms that do not accept the icon). Ads served on our behalf by these companies do not contain unencrypted personal information and we limit the use of personal information by companies that serve our ads. To learn more about ad choices, or to opt out of interest-based advertising with non-affiliated third-party sites, visit [YourAdChoices layer](https://www.aboutads.info/choices/) powered by the Digital Advertising Alliance or through the [Network Advertising Initiative's Opt-Out Tool layer](https://www.networkadvertising.org/choices). You may also visit the individual sites for additional information on their data and privacy practices and opt-out options.
141141
142142Industry standards continue to evolve around web browser "do not track" signals or configurations set in your internet browser. In addition to the advertising opt-out options above, Bank of America captures opt out preference signals, and to the extent users have rights under applicable law, treats them as valid requests to opt out of sale/sharing at the browser level.
143143
144144#### Reminder
145145
146146Please note that if you opt out of this advertising:
154154### Additional Information
155155
156156#### Third-Party Data Sharing
157157
158158Some companies may offer aggregation websites and services that allow you to share your data with them in order to consolidate your account information from different sources (such as your accounts with us or with other financial institutions) so that you can view it in one location or perform actions related to your accounts using their services. To do this, a third-party may request you to authorize access to your Bank of America accounts by providing your Bank of America user ID and password or by providing your information-sharing consent directly to Bank of America.
159159
160- The third-party may access, on your behalf, information about yourself, your Bank of America relationship, and your accounts at Bank of America.
160- The third-party may access, on your behalf, information about you, your Bank of America relationship, and your accounts at Bank of America.
161161- You should use caution and ensure that the third-party has appropriate policies and practices to protect the privacy and security of any personal information you provide or to which they are gaining access.
162- Use of your information by the third-party is governed by your agreement with them, not by Bank of America. We recommend reviewing the third parties' policies before sharing your personal information to understand how they will use and store your account information. For example, look for whether they sell any of your personal information, and if your information will be transferred, processed, or stored outside of the United States.
162- Use of your information by the third-party is governed by your agreement with them, not by Bank of America. We recommend reviewing the third party's policies before sharing your personal information to understand how they will use and store your account information. For example, look for whether they sell any of your personal information, and if your information will be transferred, processed, or stored outside of the United States.
163163- We are not responsible for the use or disclosure of any personal information accessed by any company or person to whom you provide your site user ID and password.
164164- If you share your Bank of America user ID, password or other information about your accounts with others, we will consider that you have authorized any transaction or action initiated by using the access information you provide.
165165- If you decide to revoke the authority you have given to a third-party, we strongly recommend that you change your Bank of America password to ensure that the third-party cannot continue to access your account.
166166- You may revoke your consent for certain third parties through the Security Center within [Bank of America Online Banking](https://www.bankofamerica.com/).
167167
168168#### Social Media
169169
170Bank of America engages with customers on social media platforms such as Facebook®, Twitter®, YouTube® and LinkedIn®.
170Bank of America engages with customers on social media platforms such as Facebook®, X®, YouTube® and LinkedIn®.
171171
172172- Any content you post on official Bank of America managed social media pages, such as pictures, information, opinions or any personal information that you make available to other participants on these social platforms, is subject to the Terms of Use and Privacy Policies of those respective platforms.
173173- When interacting with official Bank of America social media pages, Bank of America's privacy notices, [Social Media User Terms](https://about.bankofamerica.com/en-us/social-media/terms-of-use.html) and [Community Guidelines](https://about.bankofamerica.com/en/social-media) may apply.
174174- Please review the privacy policy for the specific social media service you are using to better understand your rights and obligations with regard to such content.
175175
176176We may allow social share buttons on our sites that enable users to easily share information on social media platforms. The non-affiliated third parties that own these widgets may have access to information about your browsing on pages of our Sites and Mobile Apps where these widgets are placed.