HTML Editor Component
^{*Contents may not have visible height}

Personal Information Collected

The Personal Information We Collect and Purpose for Collection

Here we describe the personal information that we have collected over the past year and the purpose for its collection.

HTML Editor Component
^{*Contents may not have visible height}

Categories	Examples	Collected or created	Source	Purpose of collection and use
Identifiers	Name, postal address, email address, account name, Social Security number, driver’s license number, passport number, taxpayer identification number, IP address, device IDs	Collected	Consumers give it to us We automatically get it We get it from outside sources	Offer, market, advertise or provide Products and Services Provide to or receive information from credit reporting agencies Enable billing and payment processing Prevent fraud Enable cross-context behavioral or targeted advertising Conduct research
Characteristics of protected classification under state or federal law	Age, age range, date of birth, gender, preferred language, marital status	Collected	Consumers give it to us We get it from outside sources	Offer, market, advertise or provide Products and Services Provide to or receive information from credit reporting agencies Prevent fraud Enable cross-context behavioral or targeted advertising Conduct marketing research and analytics
Commercial information	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	Collected and created	We automatically get it We get it from outside sources	Offer, market, advertise or provide Products and Services Provide to or receive information from credit reporting agencies Enable billing and payment processing Prevent fraud Enable cross-context behavioral or targeted advertising Conduct research
Geolocation data	Street address, ZIP code and device location	Collected	Consumers give it to us We automatically get it	Offer, market, advertise or provide Products and Services Prevent fraud Provide to or receive information from credit reporting agency Enable cross-context behavioral or targeted advertising Conduct research Perform analytics
Internet or other electronic network activity information	Browsing history, search history and information regarding an individual’s interaction with an internet website, application, or advertisement	Collected and created	We automatically get it	Offer, market, advertise or provide Products and Services Prevent fraud Enable cross-context behavioral or targeted advertising Conduct research
Inferences or audience segmentation	Individual profiles, preferences, characteristics, behaviors	Collected and created	Consumers give it to us We automatically get it We get it from outside sources	Offer, market, advertise or provide Products and Services Enable billing and payment processing Prevent fraud/authenticate identity Enable cross-context behavioral or targeted advertising Conduct research
Audio, electronic, visual or similar information	Video surveillance, audio recordings, photographs, signatures associated with an account	Collected	We automatically get it Consumers give it to us	Provide security services Prevent fraud/authenticate identity Enable billing and payment processing Enable quality control and improve processes for providing Products and Services Conduct research Offer, market, advertise or provide Products and Services
Biometric information	Fingerprint, voiceprint, or scan of face geometry, that is used to identify a specific individual	Collected and created	Consumers give it to us	Prevent fraud and provide identity verification
Education information	Degree(s), actual or inferred level of education	Collected	Consumers give it to us We get it from outside sources	Offer, market, advertise or provide Products and Services Enable cross-context behavioral or targeted advertising Research
Professional or employment-related information	Current or past employment history, licenses and professional membership	Collected	Consumers give it to us We get it from outside sources	Offer market, advertise or provide Products and Services Enable cross-context behavioral or targeted advertising Research

Information We Shared About Consumers

Here we describe the personal information we have collected over the past year and the purpose for which we shared or sold it. Note, some states define “sale” very broadly and include the sharing of personal information for anything of value. According to this broad definition, in the year before the date this policy was updated, we have sold or shared the following categories of personal information about at least some consumers:

Categories	Collected or created	Categories of companies we’ve shared with	Purpose for sharing	Purpose for selling
Identifiers	Collected	Product and services delivery companies Marketing services companies Cloud storage companies Credit reporting agencies Billing, payment processing and collection companies Fraud prevention and authentication/ identity verification entities Analytics companies Affiliates Research entities	Product and services delivery Marketing and advertising services Data storage Analytics and measurement Fraud prevention/ identity verification Billing, collections and payment processing Cross-context behavioral or targeted advertising Credit scoring and reporting Research	Marketing and advertising
Characteristics of protected classification under state or federal law	Collected	Cloud storage companies Credit reporting agencies Fraud prevention and authentication/ identity verification entities Analytics companies Research entities	Data storage Credit scoring and reporting Fraud prevention/ identity verification Analytics and measurement Research	Not sold
Commercial information	Collected	Product and services delivery companies Marketing services companies Cloud storage companies Credit reporting agencies Billing and payment processing companies Fraud prevention and authentication/ identity verification entities Analytics companies Affiliates Research entities	Product and services delivery Marketing and advertising Data storage Credit scoring and reporting Billing, collections and payment processing Fraud prevention/ identity verification Analytics and measurement Cross-context behavioral or targeted advertising Research	Marketing and advertising
Internet or other electronic network activity information	Collected	Marketing services companies Analytics companies Cloud storage companies Research entities	Marketing and advertising Analytics and measurement Cross-context behavioral or targeted advertising Data Storage Research	Not sold
Geolocation data	Collected	Product and services delivery companies Marketing services companies Cloud storage companies Billing and payment processing companies Fraud prevention and authentication/ identity verification entities Analytics companies Affiliates Credit reporting agencies Research entities	Product and services delivery Marketing and advertising Data storage Billing, collections and payment Fraud prevention/ identity verification Analytics and measurement Credit scoring and reporting Research	Marketing and advertising (does not include Precise Geolocation)
Inferences or audience segmentation	Collected and created	Marketing services companies Cloud storage companies Analytics companies Research entities	Marketing and advertising Data storage Analytics and measurement Research	Not sold
Audio, electronic, visual or similar information	Collected	Analytics companies Cloud storage companies Fraud prevention/security companies Marketing services companies Product and services delivery companies Research entities	Data storage Fraud prevention/security Research Employee performance, evaluation, and coaching	Not sold
Biometric information	Collected	Fraud prevention and authentication/ identity verification entities	Fraud prevention/identity verification	Not sold
Education information	Collected	Research entities	Research	Not sold
Professional or employment-related information	Collected	Credit reporting agencies Fraud prevention and authentication/ identity verification entities Research entities	Credit scoring and reporting Fraud prevention/ identity verification Research	Not sold

The Sensitive Personal Information We’ve Collected and the Purpose of its Collection, Sharing and Sale

Here we describe the sensitive personal information, as defined under California law, that we have collected about consumers over the past year. We list the purpose for which we collected it, the types of companies we’ve shared it with and why. AT&T has not sold Sensitive Personal Information.

Categories	Purpose for collection	Categories of companies we’ve shared with	Purpose for sharing (making available constitutes a share)
Gov’t IDs: Social Security, driver's license, state Identification card, or passport number	Provide information to or receive information from credit reporting agencies Prevent fraud/authenticate identity	Cloud storage companies Credit reporting agencies Fraud prevention and authentication/identity verification entities	Report to or receive information from credit reporting agencies Prevent fraud /provide identity verification
Financial accounts & credentials: account log-In, financial account, debit .card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account	Enable billing and payment processing	Not Shared	Not Shared
Precise geolocation	Offer or provide Products and Services Prevent fraud Enable location and emergency services Conduct research	Product and services delivery companies Cloud storage companies Fraud prevention and authentication/identity verification entities Research entities (Provided in aggregate)	Offer, market, advertise or provide Products and Services Provide location services Prevent fraud Research
Demographic, religious or occupational information: racial or ethnic origin, religious or philosophical beliefs, or union membership	Offer or provide Products and Services Conduct research and development Prepare aggregate insights	Marketing services companies Research entities	Offer, market, advertise or provide Products and Services Enable cross-context behavioral or targeted advertising Research
Content of communications: The contents of an individual’s Plain SMS text messages up to 48 hours and spam texts [Learn More], unless AT&T is the intended recipient of the communication	Network Operations	Not Shared	Not Shared
Biometric information: the processing of biometric Information for the purpose of uniquely identifying an individual	Prevent Fraud	Fraud prevention and authentication/identity verification entities	Prevent fraud/ provide identity verification
Children’s data: Personal data collected from an individual who is known or is likely be under the age of 18	Offer or provide Products and Services Enable location and emergency services Prepare aggregate insights Conduct research and development Prevent fraud/authenticate identity	Product and services delivery companies Cloud storage companies Fraud prevention and authentication/identity verification entities Research entities (Provided in aggregate)	Provide Products and Services Provide location services Prevent fraud Research