Fraud and Security Notice

Mastercard · Official agreement

Read the agreement

1 of 30 cards in Sharing & Disclosure

Sharing & Disclosure · Company practice

Mastercard may share your data with a listed range of third parties

Mastercard says it may share your data with third parties including financial institutions, identity verification service providers, fraud data service providers, government entities, utilities, public records, credit bureaus, property files, telecommunications operators, watch lists and geo-visualization service providers. It says it ensures your personal information is only used for the above purposes, subject to strict data protection and security obligations in its contracts with those third parties.

Details
Who
Mastercard
What it covers
Your data
What it does
May share with the listed types of third parties
Why
The purposes set out above, subject to contractual data protection and security obligations

Supporting quotations

We may share your data with third parties including financial institutions, identity verification service providers, fraud data service providers, government entities, utilities, public records, credit bureaus, property files, telecommunications operators, watch lists, geo-visualization service providers.
We ensure that your Personal Information is only used for the above purposes subject to strict data protection and security obligations through our contracts with such third parties.
For many of our fraud and security activities, we act as a data processor on behalf of and under the instructions of financial institutions and merchants.

Qualifications & exceptions

  • Stated as 'may share' with third parties 'including' those listed, so the list is not described as complete.
  • Use is limited to 'the above purposes' by contracts with the third parties.

Not stated here

  • The notice does not say which categories of data are shared with which recipients.
  • Items such as public records, property files and watch lists are listed among the third parties; the notice does not say whether they are recipients or sources of data.
  • The 'strict data protection and security obligations' are not described.
  • The notice does not say whether this sharing statement covers data Mastercard handles as a processor under the instructions of financial institutions and merchants.
Also annotated in the same passage (4)