Online Privacy Statement and Disclosures

American Express · agreement dated March 26, 2026 · Official agreement

Read the agreement

15 of 66 cards in Sharing & Disclosure

Sharing & Disclosure · Permission or license

Personal Information may be shared with credit bureaus to report or ask about finances and report or collect debts

American Express may share Personal Information, as required or permitted by law, with credit bureaus and similar institutions to report or ask about your financial circumstances, and to report or collect debts you owe.

Details
Who
American Express
What it covers
Personal Information
Why
Report or ask about financial circumstances; report or collect debts owed
Condition
As required or permitted by law

Supporting quotations

as required or permitted by law, with:
credit bureaus and similar institutions to report or ask about your financial circumstances, and to report or collect debts you owe;

Qualifications & exceptions

  • The sharing list is introduced with "may share ... as required or permitted by law", so each recipient below is subject to that qualifier.
Also annotated in the same passage (6)

Sharing & Disclosure · Permission or license

Personal Information may be shared with authorities for legal process, and with providers and agencies to prevent fraud

American Express may share Personal Information, as required or permitted by law, with regulatory authorities, courts and governmental agencies to comply with legal orders, legal or regulatory requirements and government requests pursuant to valid legal process. It may also share it with its Service Providers, regulatory authorities and governmental agencies to detect and prevent fraud or criminal activity and to protect the rights of American Express or others.

Details
What it covers
Personal Information
Why
Comply with legal orders and requirements; detect and prevent fraud or criminal activity; protect rights of American Express or others

Supporting quotations

as required or permitted by law, with:
regulatory authorities, courts, and governmental agencies to comply with legal orders, legal or regulatory requirements, and government requests pursuant to valid legal process;
our Service Providers, regulatory authorities, and governmental agencies to detect and prevent fraud or criminal activity, and to protect the rights of American Express or others;

Qualifications & exceptions

  • The sharing list is introduced with "may share ... as required or permitted by law", so each recipient below is subject to that qualifier.

Not stated here

  • The statement does not say who decides what counts as protecting "the rights of American Express or others".
Also annotated in the same passage (6)

Sharing & Disclosure · Permission or license

Personal Information may be shared with the American Express Family of Companies

American Express may share Personal Information, as required or permitted by law, with the American Express Family of Companies. This list item states no purpose for this sharing.

Details
What it covers
Personal Information
Who
The American Express Family of Companies as recipient

Supporting quotations

as required or permitted by law, with:
the American Express Family of Companies;

Qualifications & exceptions

  • The sharing list is introduced with "may share ... as required or permitted by law", so each recipient below is subject to that qualifier.

Not stated here

  • This list item gives no purpose or limit for sharing with the Family of Companies. The Affiliate Sharing Notice listed later in the statement is a separate document that is not supplied here, so what it says is not known from this text.
Also annotated in the same passage (6)

Sharing & Disclosure · Permission or license

Personal Information may be shared with Service Providers who run services for American Express

American Express may share Personal Information, as required or permitted by law, with its Service Providers who perform services for it and help it operate its business. It says it requires Service Providers to safeguard Personal Information and only use your Personal Information for the purposes it specifies.

Details
What it covers
Personal Information
Why
Service Providers perform services and help operate the business; use only for purposes American Express specifies

Supporting quotations

as required or permitted by law, with:
our Service Providers who perform services for us and help us operate our business (we require Service Providers to safeguard Personal Information and only use your Personal Information for the purposes we specify);

Qualifications & exceptions

  • The sharing list is introduced with "may share ... as required or permitted by law", so each recipient below is subject to that qualifier.

Not stated here

  • The purposes that American Express specifies to Service Providers, and the safeguards it requires of them, are not described in this passage.
Also annotated in the same passage (6)

Sharing & Disclosure · Permission or license

Personal Information may be disclosed to Advertising Partners, for example through cookies, for Targeted Advertising

American Express may share Personal Information, as required or permitted by law, with its Advertising Partners, such as through Cookies and Similar Technologies, for the purpose of serving you Targeted Advertising. The statement points to the "What are your choices?" section for how to opt out of certain disclosures of your Personal Information. That section explains how you can opt out of having Personal Information shared with Advertising Partners for Targeted Advertising purposes, as well as opt-outs that may be provided directly by the Advertising Partners.

Details
What it covers
Personal Information
Why
Serving you Targeted Advertising
Exception
Opt-out of certain disclosures, plus opt-outs offered directly by Advertising Partners

Supporting quotations

as required or permitted by law, with:
our Advertising Partners, such as through Cookies and Similar Technologies, for purposes of serving you Targeted Advertising. See “What are your choices?” for information about how to opt out of certain disclosures of your Personal Information.
section below to learn more about how you can opt out of having your Personal Information shared with AdvertisingPartners for Targeted Advertising purposes as well as opt-outs that may be provided directly by our Advertising Partners.

Qualifications & exceptions

  • The sharing list is introduced with "may share ... as required or permitted by law", so each recipient below is subject to that qualifier.
  • The opt-out is described as covering "certain disclosures", not all sharing.

Not stated here

  • Which disclosures are covered by the opt-out is explained only in the choices section, which is carded separately.

Cross-references

Also annotated in the same passage (7)

Sharing & Disclosure · Permission or license

Personal Information may be shared with financial institutions or Co-brand Partners for joint offerings

American Express may share Personal Information, as required or permitted by law, with financial institutions or Co-brand Partners with whom it jointly offers or develops products and services, in connection with those joint offerings.

Details
What it covers
Personal Information
Why
In connection with products and services jointly offered or developed

Supporting quotations

as required or permitted by law, with:
financial institutions or Co-brand Partners with whom we jointly offer or develop products and services, in connection with those joint offering; or

Qualifications & exceptions

  • The sharing list is introduced with "may share ... as required or permitted by law", so each recipient below is subject to that qualifier.

Not stated here

  • The financial institutions and Co-brand Partners are not named in this passage.
Also annotated in the same passage (6)

Sharing & Disclosure · Permission or license

Personal Information may be shared with necessary parties in a sale of part or all of the Family of Companies

American Express may share Personal Information, as required or permitted by law, with necessary parties in the context of a sale of all or part of the American Express Family of Companies or their assets.

Details
What it covers
Personal Information
Condition
A sale of all or part of the Family of Companies or their assets

Supporting quotations

as required or permitted by law, with:
necessary parties in the context of a sale of all or part of the American Express Family of Companies or their assets.

Qualifications & exceptions

  • The sharing list is introduced with "may share ... as required or permitted by law", so each recipient below is subject to that qualifier.

Not stated here

  • The statement does not say who the necessary parties are, or what limits apply to how they may use the information.
Also annotated in the same passage (6)

Sharing & Disclosure · Company practice

Personal Information may be transferred worldwide to Service Providers and the Family of Companies

American Express may transfer Personal Information to Service Providers or companies within the American Express Family of Companies throughout the world, for example to process transactions and provide you with its products or services. It says that regardless of where it processes your information, it still protects it in the manner described in this online privacy statement and according to the applicable laws.

Details
Where
Throughout the world
Why
For example, to process transactions and provide products or services

Supporting quotations

We may transfer Personal Information to Service Providers or companies within the American Express Family of Companies throughout the world, for example, to process transactions and provide you with our products or services. Regardless of where we process your information, we still protect it in the manner described in this online privacy statement and according to the applicable laws.

Qualifications & exceptions

  • "For example" introduces the purposes, so processing transactions and providing products or services are examples.

Not stated here

  • The statement does not name the countries involved or the legal mechanism used for transfers.

Sharing & Disclosure · Permission or license

Aggregated or De-identified Information may be shared, including with Business Partners for products and research

The statement describes De-identified Information as information that cannot be reasonably linked to or associated with you, and Aggregated Information as data relating to multiple people that has been combined and does not identify you individually. American Express says it may share Aggregated Information or De-identified Information in several ways, for example for the same reasons it might share Personal Information, with Business Partners to help develop and market products or services, or with Business Partners to conduct analysis and research about customers and website visitors.

Details
What it covers
Aggregated Information and De-identified Information
Why
Same reasons as Personal Information; help Business Partners develop and market products; Business Partners' analysis and research about customers and website visitors

Supporting quotations

How do we handle Aggregated and De-identified Information?
is information that cannot be reasonably linked to or associated with you.
relating to multiple people, which has been combined or aggregated and which does not identify you individually.
We may share Aggregated Information or De-identified Information in several ways, for example:
for the same reasons as we might share Personal Information
with Business Partners to help develop and market products or services; or
with Business Partners to conduct analysis and research about customers and website visitors;

Qualifications & exceptions

  • "For example" introduces the ways of sharing, so the list is not stated to be complete.

Not stated here

  • The Business Partners recipients are defined in the Glossary (carded separately); this passage does not say what safeguards apply to Aggregated or De-identified Information once shared.
Also annotated in the same passage (1)

Sharing & Disclosure · Context

Glossary: Business Partners are third parties under contract; Co-brand Partners offer cards with both brand logos

The Glossary defines Business Partners as any third parties with whom American Express conducts business and has a contractual relationship, such as a business that accepts American Express branded cards. It defines Co-brand Partners as businesses American Express partners with to offer cards featuring both brand logos.

Details
What it covers
Business Partners; Co-brand Partners

Supporting quotations

any third parties with whom we conduct business and have a contractual relationship, such as a business that accepts American Express branded cards.
businesses we partner with to offer cards featuring both brand logos.

Sharing & Disclosure · Context

Glossary: Service Providers are vendors and companies that perform business operations for American Express

The Glossary defines Service Providers as any vendor, third party and/or company that performs business operations on American Express's behalf, such as printing, mailing, and other communications services (email, direct mail, etc.), marketing, data processing, servicing, collections, or ad management.

Details
What it covers
Service Providers

Supporting quotations

any vendor, third party and/or company that performs business operations on our behalf, such as printing, mailing, and other communications services (email, direct mail, etc.), marketing, data processing, servicing, collections, or ad management.

Qualifications & exceptions

  • "Such as" introduces examples of the business operations.

Sharing & Disclosure · Company commitment

Principles: share with third parties only where needed, authorized, for fraud reduction, or as law permits

The Principles say American Express only shares your personal data with third parties where it is necessary to provide you with products or services or as part of the nature of its relationship with you, where it has previously informed you or been authorized by you, in connection with efforts to reduce fraud or criminal activity, or as permitted by law.

Details
What it does
Share personal data with third parties only on the stated grounds
Condition
Necessary for products or services or the relationship; previously informed or authorized; fraud or crime reduction; or permitted by law

Supporting quotations

We only share your personal data with third parties where it is necessary to provide you with products or services or as part of the nature of our relationship with you, where we have previously informed or been authorized by you, in connection with our efforts to reduce fraud or criminal activity, or as permitted by law.

Qualifications & exceptions

  • The final ground, "as permitted by law", is broad.

Not stated here

  • The Principles do not say whether "third parties" includes other companies in the American Express Group, and do not list recipients; the online statement's sharing list is carded separately and the page does not say how the two connect.

Sharing & Disclosure · Context

Glossary: Advertising Partners place ads and track ad performance, including social media and online partners

The Glossary defines Advertising Partners as partners American Express works with to place ads on its and third parties' websites and apps and track how ads perform, including social media and online partners such as Facebook and Google.

Details
What it covers
Advertising Partners

Supporting quotations

partners we work with to place ads on our and third parties’ websites and apps and track how ads perform, including social media and online partners, such as Facebook and Google.