Wells Fargo California Consumer Privacy Act Notice and Notice at Collection

Data Access & Collection · Company practice

Collection contexts and relationship-dependent scope of Personal Data

Wells Fargo collects Personal Data in multiple business contexts, including providing financial products and services, human resources administration, and vendor management. The specific categories and volume collected depend on the company's relationship and interactions with the individual.

Supporting quotations

We collect Personal Data in a variety of contexts. For example, we collect Personal Data to provide financial products and services, for our human resources, and for vendor management purposes.

The Personal Data that we collect about a specific California resident will depend on, for example, our relationship or interaction with that individual.

Qualifications & exceptions

• Contexts include financial products/services, human resources, and vendor management.
• Specific data collected varies based on individual relationship and interactions.

Data Access & Collection · Company practice

Categories of Personal Data collected in the preceding 12 months

During the past 12 months, Wells Fargo collected eleven standard categories of Personal Data: personal identifiers, personal contact and financial details, characteristics of protected classes, purchase and transaction records, biometric information, online and browsing activity, geolocation data, audio/visual recordings, employment-related information, education information under FERPA, and inferences reflecting preferences or characteristics.

Supporting quotations

During the past 12 months, we have collected the following categories of Personal Data.

Personal Identifiers — Personal unique identifiers, such as full name and federal or state issued identification numbers, including Social Security number, driver’s license number, and passport number

Personal Information — Personal information, including contact details (e.g., telephone number and address), financial information (e.g., account number and balance), payment card details (e.g., credit and debit card numbers), and medical and health insurance information

Characteristics of Protected Classes — Characteristics of protected classes or groups under state or federal law, such as sex, disability, citizenship, primary language, immigration status, and marital status

Purchase Information — Purchase information, such as products and services obtained and transaction histories

Biometric Information — Biometric information, such as fingerprints and voiceprints

Internet or Online Information — Internet or online information (e.g., browsing history), including information about interaction with our websites, applications, or advertisements

Geolocation Data — Geolocation data, such as device location

Audio and Visual Information — Audio, electronic, visual, thermal, olfactory, or similar information, such as call and video recordings

Employment Information — Professional or employment-related information, such as work history, information from background checks, resumes, and personnel files, personal qualifications, training, and work preference, payroll and benefit information, leave and absence information, and performance and disciplinary information

Education Information — Education information subject to the federal Family Educational Rights and Privacy Act, such as student records and confirmation of graduation

Inferences — Inferences based on information about an individual to create a summary about, for example, an individual’s preferences and characteristics

Qualifications & exceptions

• Covers the 12-month period preceding the notice date.
• Includes FERPA-subject education data, background check records, biometric voice/fingerprints, and inference profiles.

Data Access & Collection · Company practice

Categories of Sensitive Personal Information collected

Wells Fargo collects Sensitive Personal Information under California law, including government identification numbers (Social Security, driver's license, passport), account login credentials and financial account numbers with security codes, precise geolocation, racial or ethnic origin, religious beliefs, citizenship, union membership, contents of non-directed communications, uniquely identifying biometric data, and health or sexual orientation details.

Supporting quotations

Sensitive Personal Information — Includes:

Social Security number, driver’s license, state identification card, or passport number;

Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account;

Precise geolocation;

Racial or ethnic origin, religious or philosophical beliefs, citizenship, immigration status, or union membership;

The contents of mail, email, and text messages unless we are the intended recipient of the communication;

Biometric information processed to uniquely identify an individual

Health information, sexual orientation.

Qualifications & exceptions

• Includes government ID numbers, financial access credentials, and precise geolocation.
• Covers mail, email, and text content where Wells Fargo is not the intended recipient.
• Includes protected sensitive classifications such as racial/ethnic origin, health info, and sexual orientation.

Data Access & Collection · Company practice

Categories of sources from which Personal Data is collected

Wells Fargo collects Personal Data from diverse categories of sources depending on the individual relationship: directly from California residents or their representatives (via physical forms, phone, websites, and social media); public records and government entities; third-party data providers for fraud prevention, underwriting, and marketing (including data brokers, advertising networks, and analytics providers); outside entities supporting human resources and workforce management; and outside commercial partners, financial institutions, and transaction parties supporting everyday banking operations, services, and corporate transactions.

Supporting quotations

The sources from which we collect Personal Data depend on, among other things, our relationship or interaction with a specific California resident. The information below lists the categories of sources from which we collect Personal Data in different contexts.

From California residents directly, or other individuals acting on their behalf, through, for example, physical (e.g., paper application), audible (e.g., phone), and electronic (e.g., website, social media) sources.

Public records or widely available sources, including information from the media, and information that is made available by federal, state, and local government entities.

Outside companies or organizations that provide data to support activities such as fraud prevention, underwriting, and marketing. Examples may include internet service providers, social networks, data brokers, advertising networks, and data analytics providers.

Outside companies or organizations from whom we collect Personal Data to support human resource and workforce management activities. Examples may include service providers and social networks.

Outside companies or organizations from whom we collect Personal Data as part of providing products and services, completing transactions, supporting our everyday operations, or business management and development. Examples include companies or organizations to whom we provide products or services; other parties, partners, and financial institutions; and parties involved with mergers, acquisitions, and other transactions involving transfers of all or part of a business, or a set of assets.

Qualifications & exceptions

• Sources depend on Wells Fargo's specific relationship and interaction with the California resident.
• Direct sources include paper applications, phone interactions, websites, and social media.
• Third-party commercial sources include data brokers, ad networks, analytics providers, and business transaction partners.