Wells Fargo CCPA Notice at Collection scope and effective date
Wells Fargo provides this California Consumer Privacy Act Notice at Collection, effective August 13, 2026, explaining how it collects, uses, retains, and discloses personal information of California residents and describing their statutory rights under the CCPA.
Details
Who
Wells Fargo companies described below
What it does
collect, use, retain, and disclose
What it covers
personal information about California residents
Why
explain collection, use, retention, disclosure, and CCPA statutory rights
Where
California
When
Effective: August 13, 2026
Supporting quotations
Effective: August 13, 2026
(Last Reviewed: 08/13/2026)
This California Consumer Privacy Act Notice at Collection ("Notice") is provided by the Wells Fargo companies described below. These companies are referred to in this Notice as "we" or "us."
This Notice explains how we collect, use, retain, and disclose personal information about California residents. The Notice also explains certain rights that California residents have under the California Consumer Privacy Act (the “CCPA”).
Qualifications & exceptions
Applies specifically to personal information of California residents.
Effective August 13, 2026 and last reviewed August 13, 2026.
Discretionary processing of privacy requests from non-California U.S. residents
Although the CCPA legally applies only to California residents, U.S. residents of other states may submit privacy requests which Wells Fargo may process at its discretion under CCPA standards. Wells Fargo applies identical limitations and exceptions to non-resident requests and reserves the right to modify or terminate this discretionary practice at any time except where prohibited by law.
Details
Who
Wells Fargo
What it does
may process requests from non-California residents
What it covers
requests submitted by U.S. residents of states other than California
Condition
even though the CCPA does not require us to do so
Exception
reserve the right to change or stop the practice... except as otherwise required by law
Where
U.S. state other than California
Supporting quotations
The CCPA only applies to information about residents of California. If you are a resident of a U.S. state other than California, you may submit a request and we may process it, as described in this Notice, even though the CCPA does not require us to do so. In accepting, processing, and responding to requests by individuals who are not California residents, we will apply all the same limitations and exceptions under the CCPA to those requests as apply to requests made by California residents. We reserve the right to change or stop the practice of accepting requests from U.S. residents of states other than California, except as otherwise required by law.
Qualifications & exceptions
The CCPA legally applies only to California residents; processing requests from other states is voluntary.
Wells Fargo applies all statutory CCPA limitations and exceptions to non-resident requests.
Wells Fargo reserves the right to modify or stop processing out-of-state requests at any time unless prohibited by law.
Legal Rights & Agreement Rules · Context
Definition of Personal Data and inclusion of contractors as service providers
Under the CCPA, personal information covers information identifying, relating to, describing, or reasonably linkable, directly or indirectly, with a California resident or household, referenced as Personal Data. Throughout the Notice, any reference to service providers includes contractors.
Details
Who
Wells Fargo
What it covers
Personal Data (personal information) and service providers/contractors
Why
defining statutory scope and contractor inclusion under CCPA
Where
California
Supporting quotations
Under the CCPA, "personal information" is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household. This information is referred to in this Notice as "Personal Data." Similarly, any reference to “service providers” within this notice also includes “contractors.”
Qualifications & exceptions
Encompasses information identifying, relating to, or reasonably linkable to a California resident or household.
Service providers explicitly includes contractors.
Legal Rights & Agreement Rules · User right or choice
California resident rights under CCPA: Know, Delete, Correct, Opt-Out of Sharing, and Non-Discrimination
California residents have statutory rights under the CCPA to submit requests: a Request to Know (categories of data collected, source categories, business/commercial purposes, disclosure categories, sharing categories, and specific pieces of data); a Request to Delete; a Request to Correct inaccurate personal data; and a Request to Opt-Out of Sharing for cross-context behavioral advertising. Individuals also have the right to be free from discrimination or retaliation (including as employees, applicants, or independent contractors) for exercising CCPA rights.
Details
Who
California resident
What it does
right to request Know, Delete, Correct, Opt-Out of Sharing, and be free from discrimination
What it covers
Personal Data and CCPA privacy rights
Where
California
Supporting quotations
If you are a California resident, you have the right to request:
The following information ("Request to Know"):
a. The categories of Personal Data we collected about you and the categories of sources from which we collected the Personal Data;
b. The business or commercial purpose for collecting or sharing Personal Data about you;
c. The categories of third parties to whom we disclosed Personal Data about you, and the categories of Personal Data disclosed;
d. The categories of Personal Data about you that we shared and the categories of third parties with whom we shared such Personal Data; and
e. The specific pieces of Personal Data we collected about you.
Deletion of Personal Data we collected from you ("Request to Delete").
Correction of inaccurate personal information that we maintain about you ("Request to Correct").
Opt out of sharing, for purposes of cross-context behavioral advertising, ("Request to Opt-Out of Sharing").
In addition, you have the right to be free from discrimination by a business for exercising your CCPA privacy rights, including the right as an employee, applicant, or independent contractor not to be retaliated against for exercising your CCPA privacy rights.
Qualifications & exceptions
Rights include Request to Know (categories, sources, purposes, disclosures, shares, specific pieces).
Rights include Deletion, Correction of inaccurate data, and Opt-Out of Sharing for targeted ads.
Includes statutory protection against discrimination or retaliation for employees, applicants, and contractors.
Availability of annual CCPA data request metrics disclosure
Wells Fargo publishes metrics regarding CCPA data requests in an annual disclosure accessible via its privacy website.
Details
Who
Wells Fargo
What it covers
CCPA data request metrics
Why
annual disclosure reporting
Supporting quotations
View Wells Fargo's CCPA data request metrics in our annual disclosure.
Qualifications & exceptions
Metrics regarding CCPA data requests are published in an annual disclosure.
Not stated here
The content of the linked annual disclosure metrics document is not supplied in this agreement.
Legal Rights & Agreement Rules · Procedure
Methods and identity verification procedures for Requests to Know, Delete, and Correct
California residents may submit Requests to Know, Delete, or Correct by calling 1-844-774-9229 or via the online privacy center. Online banking customers and employees can authenticate using existing log-in credentials; all other individuals must provide identity information (name, contact details, SSN or ITIN, date of birth) and a copy of government-issued photo ID (driver's license, state ID, or matricula card). Wells Fargo verifies identity by matching submitted information against similar data sources.
Details
Who
Wells Fargo
What it does
make request and verify identity
What it covers
Request to Know, Delete, or Correct
Condition
authentication via online credentials or identity documents (SSN/ITIN, DOB, photo ID)
Where
California
Supporting quotations
If you are a California resident, you can make a Request to Know, Delete, or Correct by:
Wells Fargo Online® customers and Wells Fargo employees: you can make a request by using your existing Wells Fargo log-in credentials.
For all other individuals, we will ask you to provide the following information to identify yourself:
Name, contact information, Social Security or individual taxpayer identification number, and date of birth; and
A copy of a government-issued photo ID. We accept your driver’s license, state ID, or matricula card.
When you make a Request to Know, Delete, or Correct, we will attempt to verify that you are who you say you are. For example, we will attempt to match information that you provide in making your Request with other sources of similar information to reasonably verify identity.
Qualifications & exceptions
Requests can be submitted by toll-free phone (1-844-774-9229) or online privacy center.
Online banking customers and employees can authenticate with existing credentials.
Other individuals must provide identifying data (SSN/ITIN, DOB) and government photo ID (driver's license, state ID, matricula card).
Not stated here
The external portal at the privacy center link is outside of this document and not supplied here.
Legal Rights & Agreement Rules · User right or choice
Procedures for Request to Opt-Out of Sharing and processing Global Privacy Control signals
California residents can make a Request to Opt-Out of Sharing via Wells Fargo's online opt-out notice page. Wells Fargo also processes CCPA-mandated opt-out preference signals, such as the Global Privacy Control (GPC), which set opt-out preferences for the specific browser or device used.
Details
Who
Wells Fargo
What it does
process opt-out preference signals and requests to opt-out of sharing
What it covers
sharing preferences for specific browser or device (Global Privacy Control)
Why
opt-out of cross-context behavioral advertising sharing
Supporting quotations
To make a Request to Opt-Out of Sharing, click here . We also process opt-out preference signals, such as the Global Privacy Control, as required by the CCPA. These signals set the opt out of sharing preferences for the specific browser or device you are using. For information about how to use the Global Privacy Control, please visit https://globalprivacycontrol.org/ .
Qualifications & exceptions
Opt-out of sharing can be submitted through the dedicated opt-out notice link.
Wells Fargo processes browser/device opt-out preference signals including the Global Privacy Control (GPC).
Opt-out preference signals apply to the specific browser or device used.
Not stated here
The text of the separately linked opt-out notice and the external Global Privacy Control specification are not supplied in this source document.
Legal Rights & Agreement Rules · Restriction or exception
Statutory exemptions from CCPA requests under GLBA, HIPAA, consumer accounts, and legal duties
Personal Data handled by Wells Fargo is frequently subject to federal privacy laws other than the CCPA (including the Gramm-Leach-Bliley Act and HIPAA) or statutory exceptions. Exempt Personal Data is outside the scope of CCPA Requests to Know, Delete, or Correct, and Wells Fargo may decline all or part of a request relating to exempt data (such as consumer personal/household banking accounts subject to separate notices like the Wells Fargo U.S. Consumer Privacy Notice). Furthermore, data will not be deleted if retention is necessary to comply with legal obligations, nor provided if doing so would adversely affect another individual's privacy rights.
Details
Who
Wells Fargo
What it does
may decline all or part of Request relating to exempt Personal Data
What it covers
Personal Data subject to GLBA, HIPAA, consumer accounts, or legal obligation exceptions
Exception
GLBA, HIPAA, adverse effect on other individual privacy rights, legal obligation retention
Supporting quotations
Privacy and data protection laws, other than the CCPA, apply to much of the Personal Data that we handle. When these other laws apply, Personal Data may be exempt from, or outside the scope of, a request to Know, Delete, or Correct. For example, Personal Data subject to certain federal privacy laws, such as the Gramm-Leach-Bliley Act or the Health Insurance Portability and Accountability Act (HIPAA), is exempt from CCPA Requests. As a result, we may decline all or part of your Request to the extent that it relates to exempt Personal Data. This means that we may not provide, delete, correct, or opt-out some, or all, of this Personal Data when you make a CCPA Request.
As examples, our processing of, or response to, a CCPA Request may not include some or all of the following Personal Data:
Consumer Accounts. Personal Data related to consumer accounts used for personal, family, or household purposes and applications for such accounts. We have other privacy notices providing certain information on use and sharing of this data, for example, the Wells Fargo U.S. Consumer Privacy Notice, available at www.wellsfargo.com/privacy-security.
The types of Personal Data described above are examples. We have not listed all types of Personal Data that may not be included when we respond to or process CCPA Requests.
In addition to the above examples, we may not include Personal Data when we respond to or process CCPA Requests when the CCPA recognizes another exception. For example, we will not provide the Personal Data about another individual when doing so would adversely affect the data privacy rights of that individual. As another example, we will not delete Personal Data when it is necessary to maintain that Personal Data to comply with a legal obligation.
We will verify and respond to your request consistent with applicable law, taking into account the type and sensitivity of the Personal Data subject to the request.
Qualifications & exceptions
Personal Data subject to GLBA or HIPAA is exempt from CCPA Requests to Know, Delete, or Correct.
Personal Data related to consumer banking accounts is subject to separate notices (e.g. U.S. Consumer Privacy Notice) and may be excluded.
Requests will not delete data required to comply with legal obligations or provide data affecting others' privacy rights.
Not stated here
The text of the referenced Wells Fargo U.S. Consumer Privacy Notice and linked privacy pages is not supplied in this document.
Verification requirements for individual and entity authorized agents submitting CCPA requests
California residents may authorize an individual or legal entity agent to submit CCPA requests on their behalf. Individual agents must provide their own identity data/photo ID, the resident's identity data/photo ID, and proof of authorization (signed permission, power of attorney, guardianship/conservatorship order, or custodial parent birth certificate for minors). Legal entity agents must provide authorization proof from the resident, the resident's identity data/photo ID, and proof of authority on letterhead signed by an officer.
Details
Who
Wells Fargo
What it does
verify authorized agent requests
What it covers
request on behalf of California resident by authorized agent
Condition
submission of agent/resident identity details and authorization proof (POA, order, signed permission)
Where
California
Supporting quotations
If you are a California resident, you may authorize an agent to make a request on your behalf. A California resident's authorized agent may make a request on behalf of the California resident by using the submission methods listed above under “How To Make Requests.” As part of our verification process, we may request that you provide, as applicable:
For an individual ("requestor") making a request on behalf of a California resident:
The requestor's name; contact information; Social Security or individual taxpayer identification number; date of birth; and driver’s license, state ID, or matricula card.
The name; contact information; Social Security or individual taxpayer identification number; date of birth; and driver’s license, state ID, or matricula card of the California resident on whose behalf the request is being made.
A document to confirm that the requestor is authorized to make the request. We may accept, as applicable, a signed permission by the California resident on whose behalf the request is made, a copy of a power of attorney, legal guardianship or conservatorship order, or a birth certificate of a minor if the requestor is the custodial parent.
For a company or organization ("legal entity requestor") making a request on behalf of a California resident:
Proof that the California resident has authorized the legal entity requestor to make the request. We may accept as applicable, a signed permission by the California resident on whose behalf the request is made, copy of power of attorney, or legal guardianship or conservatorship order.
The name; contact information; Social Security or individual taxpayer identification number; date of birth; and driver’s license, state ID, or matricula card of the California resident on whose behalf the request is being made. From the individual who is acting on behalf of the legal entity requestor, proof that the individual is authorized by the legal entity requestor to make the request. We accept a letter on the legal entity requestor's letterhead, signed by an officer of the organization. We provide a template to use via the URL provided above for making requests.
Qualifications & exceptions
Applies to both individual requestors and legal entity requestors acting on behalf of California residents.
Requires verifiable proof of authority (power of attorney, signed permission, guardianship order, or minor birth certificate).
Periodic modifications to the CCPA Notice and posting of updated versions
Wells Fargo reserves the right to periodically change or update this Notice, posting revised versions directly on the webpage with a 'Last Updated' date indication.
Details
Who
Wells Fargo
What it does
change or update Notice and post on webpage
What it covers
this Notice
Supporting quotations
We may change or update this Notice periodically. When we do, we will post the revised Notice on this webpage indicating when the Notice was "Last Updated."
Qualifications & exceptions
Revised notices are posted on the webpage indicating the Last Updated date.
Legal Rights & Agreement Rules · Context
Scope of Wells Fargo corporate entities and subsidiaries providing the CCPA Notice
This Notice is provided by Wells Fargo & Company and subsidiaries that either act as a business under the statutory CCPA definition or are controlled by Wells Fargo & Company and use the Wells Fargo brand name, specifically including Wells Fargo Bank, N.A.
Details
Who
Wells Fargo and Company and its subsidiaries (including Wells Fargo Bank, N.A.)
What it does
provides this Notice
What it covers
This Notice
Condition
subsidiaries that act as a business under CCPA or are controlled and use the Wells Fargo name
Supporting quotations
This Notice is provided by Wells Fargo and Company and its subsidiaries that either: (1) act as a business within the meaning of the CCPA, or (2) are controlled by Wells Fargo and Company and use the Wells Fargo name. As an example, companies providing this Notice include Wells Fargo Bank, N.A.
Qualifications & exceptions
Applies to Wells Fargo & Company and subsidiaries acting as a CCPA business or controlled subsidiaries using the Wells Fargo name.