Updated: December 2022
U.S. Bank is dedicated to doing the right thing. The information on this page provides details on how we respond to and implement processes to uphold applicable state laws. The laws on this page give individuals certain rights regarding the personal information that U.S. Bank or our affiliates have collected from or about them.
The information on this page complements the notices and disclosures regarding your rights under federal laws and regulations (e.g., the Gramm-Leach-Bliley Act). For more information, please visit usbank.com/privacy.
Last updated: December 2022
This Privacy Notice for California Residents (this “Notice”) applies solely to residents of the State of California (“consumers” or “you”) and supplements the information contained in any other Privacy Statement or Notice provided by U.S. Bank and its affiliates (collectively, “U.S. Bank” “our” or “we”). Please note that some of our affiliates may provide a separate privacy notice, in which case that notice will apply to your personal information. We adopt this Notice to comply with the California Consumer Privacy Act of 2018 and, as amended, the California Privacy Rights Act of 2020 (together, “CPRA”). This Notice describes how U.S. Bank collects, uses, and discloses information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household (“personal information”). This Notice applies to personal information we collect online and offline, such as when you apply for our products or services, use our websites or applications, respond to surveys, contact customer support, when you visit our offices or attend a U.S. Bank event, or otherwise interact with us (collectively, “Services”). The information on this page complements the notices and disclosures regarding your rights under federal laws and regulations (e.g., the Gramm-Leach-Bliley Act). For more information, please visit usbank.com/privacy.
The rights contained in this Notice may not apply in certain situations depending on your relationship with U.S. Bank and U.S. Bank’s other legal obligations, and as otherwise provided for in the CPRA, and the GLBA exemption contained therein. We may, from time to time, make changes to this Notice. If we do make changes to the Notice, we will let you know by posting the revised Notice with a new “Last Updated” date posted at the top of the Notice. Any changes to this Notice will become effective when posted unless indicated otherwise. We encourage you to review this Notice regularly to stay informed about our information practices and the choices available to you.
We may collect the following categories of personal information when you engage our Services:
We will collect the personal information described above from one or more of the following sources:
We may use or disclose personal information that we collect for one or more of the following business purposes to, among other things:
We may disclose your personal information for a business purpose to the following categories of parties:
We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other legitimate business purposes, including to meet our legal, regulatory, or other compliance obligations.
We do not sell personal information to third parties for monetary consideration without your prior consent, but we may share your personal information with third parties for cross-context behavioral advertising.
The categories of personal information that we may have shared are:
We do not purposefully sell or share the personal information of children under the age of 16.
For more on your personal information share/sale rights, see Right to Opt-out of Sharing or Selling.
We reserve the right to transfer any personal information we have about you in the event we sell or transfer all or a portion of our business or assets (including in the event of a merger, acquisition, joint venture, reorganization, divestiture, dissolution or liquidation).
Under the CPRA, we collect the types of sensitive personal information described in the Categories of Personal Information We Collect section above. U.S. Bank only collects and uses sensitive personal information for certain limited purposes, such as providing services and products to consumers, detecting data security incidents and protecting against fraud (“Limited Purposes”). Because U.S. Bank uses this sensitive personal information for Limited Purposes, there is no need for us to provide a Limit Use and Disclosure of Sensitive Personal Information right under the CPRA.
We provide in the chart below a summary of our prior 12-month personal and sensitive information handling practices. You can learn more about the information we collect at or before the point of collection above in the Categories of Personal Information We Collect, Where We Collect Your Personal Information, Use of Personal Information, and Disclosure of Personal Information for a Business Purpose sections.
Categories of Personal Information |
Sources |
Business or Commercial Purpose of Processing and Disclosure and Recipients of Personal Information |
---|---|---|
Identifiers, such as a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver’s license number, passport number, signature or other similar identifiers |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as a name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Sensitive personal information, such as social security, driver's license, state identification card, or passport number; your account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; racial or ethnic origin, religious beliefs, or union membership; the contents of a your mail, email, and text messages unless U.S. Bank was the intended recipient of the communication; genetic data; health data; precise geolocation data; biometric information; and sex life or sexual orientation data |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Protected classification characteristics under California or federal law, such as age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information) |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Commercial information, such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Biometric information, such as fingerprints, faceprints, voiceprints and behavioral patterns |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Internet or other electronic network activity information, such as browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Geolocation data, such as physical location or movements |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Audio and visual information, such as audio, electronic or similar information such as call recordings |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Employment information, such as current or past job history |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
Inferences drawn from other personal information, such as inferences drawn from any of the information identified above to create a profile about you reflecting preferences, characteristics, attitudes and or similar trends |
|
Sold for Monetary Consideration: None Shared for Cross-Context Behavioral Advertising: We may have shared this category of personal information with third-party cookie and tracker providers for cross-context behavioral advertising. Service Providers and Contractors: We may have disclosed this category of personal information with our service providers or contractors who help provide certain services for us, such as; Professional services organizations, such as auditors and law firms, Our business partners, Online advertising services and networks, Internet service providers, Data analytics providers, Operating systems and platforms, Social networks and Data brokers. Purpose of Processing: We may have used and disclosed this category of personal information for other reasons, as described in greater detail in the Use of Personal Information and Disclosure of Personal Information for a Business Purpose sections. |
This section describes your CPRA rights and explains how to exercise those rights:
You have the right, subject to certain exceptions defined in the CPRA and other applicable laws and regulations, to request that U.S. Bank disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:
You have the right to receive this information in a format, to the extent technically feasible, that is portable, usable, and allows you to transmit the personal information to a person without impediment, where the processing is carried out by automated means.
You have the right, subject to certain exceptions defined in the CPRA and other applicable laws and regulations, to request that U.S. Bank delete any of your personal information that we collected from you and retained. Once we receive and confirm your verifiable consumer request we will delete (and direct the recipients of your personal information to delete) your personal information from our records.
Please note the following right is effective January 1, 2023.
You have the right, subject to certain exceptions defined in the CPRA and other applicable laws and regulations, to submit a request to correct any inaccurate personal information that we may have about you. To correct your information, please visit Update my contact information on the Customer Service portion of this website.
Please note the following right is effective January 1, 2023.
We use technologies such as cookies, pixel tags, web beacons, and other similar technologies, that gather information on our website. That information is used for a variety of purposes, such as to understand how visitors interact with our websites, or to serve advertisements on our websites or on other websites. The use of technologies, such as cookies, constitutes a ‘share’ or ‘sale’ of personal information under the CPRA. You can stop the use of certain third-party tracking technologies that are not considered our service providers by clicking the “Opt-Out” button below or by clicking on “Your California Privacy Choices” at the bottom of usbank.com. Note that due to technological limitations, if you visit our website from a different computer or device, or clear cookies on your browser that store your preferences, you will need to return to this screen to opt-out and/or rebroadcast the signal.
We also treat opt-out preference signals, such as the Global Privacy Control, as valid requests to opt-out of the sale or sharing of your personal information. An opt-out preference signal is a signal that is sent by a platform, technology, or mechanism on your behalf that communicates your choice to opt-out of the sharing for targeted advertisements or sale of your personal information. You can learn more about implementing opt-out preference signals by visiting the Global Privacy Control website here or by exploring other developing technologies and services that offer this tool.
To exercise the rights described above, please submit a verifiable consumer request to us through one of the following methods:
You may only make a verifiable consumer request for access twice within a 12-month period.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. We will generally verify your identity by asking you to provide personal information related to your recent interactions with us. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.
You may exercise your privacy rights through an authorized agent. If we receive your request from an authorized agent, we may ask for evidence that you have provided such agent with a power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf.
You have the right not to be discriminated against for exercising any of your privacy rights. This includes us not: (a) denying you goods or services; (b) charging you different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; (c) providing you a different level or quality of goods or services; (d) suggesting to you that you will receive a different price or rate for goods or services or a different level or quality of goods or services; and (e) retaliating against you for exercising your privacy rights.
If you need this information in an alternative accessible format, you may contact our Accessibility Banking Coordinator as described on our Accessibility Banking page.
If you have any questions or comments about this Notice or our privacy practices generally, we encourage you to contact our customer service department by calling 800-USBANKS (800-872-2657).