Skip Navigation
Start of main content

Personal Information Collected

The Personal Information We Collect and Purpose for Collection

Here we describe the personal information that we have collected over the past year and the purpose for its collection.

Print this page

Categories Examples Collected or created Source Purpose of collection and use
Identifiers Name, postal address, email address, account name, Social Security number, driver’s license number, passport number, taxpayer identification number, IP address, device IDs
  • Collected
  • Consumers give it to us
  • We automatically get it
  • We get it from outside sources
  • Offer, market, advertise or provide Products and Services
  • Provide to or receive information from credit reporting agencies
  • Enable billing and payment processing
  • Prevent fraud
  • Enable cross-context behavioral or targeted advertising
  • Conduct research
Characteristics of protected classification under state or federal law Age, age range, date of birth, gender, preferred language, marital status
  • Collected
  • Consumers give it to us
  • We get it from outside sources
  • Offer, market, advertise or provide Products and Services
  • Provide to or receive information from credit reporting agencies
  • Prevent fraud
  • Enable cross-context behavioral or targeted advertising
  • Conduct marketing research and analytics
Commercial information Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies
  • Collected and created
  • We automatically get it
  • We get it from outside sources
  • Offer, market, advertise or provide Products and Services
  • Provide to or receive information from credit reporting agencies
  • Enable billing and payment processing
  • Prevent fraud
  • Enable cross-context behavioral or targeted advertising
  • Conduct research
Geolocation data Street address, ZIP code and device location
  • Collected
  • Consumers give it to us
  • We automatically get it
  • Offer, market, advertise or provide Products and Services
  • Prevent fraud
  • Provide to or receive information from credit reporting agency
  • Enable cross-context behavioral or targeted advertising
  • Conduct research
  • Perform analytics
Internet or other electronic network activity information Browsing history, search history and information regarding an individual’s interaction with an internet website, application, or advertisement
  • Collected and created
  • We automatically get it
  • Offer, market, advertise or provide Products and Services
  • Prevent fraud
  • Enable cross-context behavioral or targeted advertising
  • Conduct research
Inferences or audience segmentation Individual profiles, preferences, characteristics, behaviors
  • Collected and created
  • Consumers give it to us
  • We automatically get it
  • We get it from outside sources
  • Offer, market, advertise or provide Products and Services
  • Enable billing and payment processing
  • Prevent fraud/authenticate identity
  • Enable cross-context behavioral or targeted advertising
  • Conduct research
Audio, electronic, visual or similar information Video surveillance, audio recordings, photographs, signatures associated with an account
  • Collected
  • We automatically get it
  • Consumers give it to us
  • Provide security services
  • Prevent fraud/authenticate identity
  • Enable billing and payment processing
  • Enable quality control and improve processes for providing Products and Services
  • Conduct research
  • Offer, market, advertise or provide Products and Services
Biometric information Fingerprint, voiceprint, or scan of face geometry, that is used to identify a specific individual
  • Collected and created
  • Consumers give it to us
  • Prevent fraud and provide identity verification
Education information Degree(s), actual or inferred level of education
  • Collected
  • Consumers give it to us
  • We get it from outside sources
  • Offer, market, advertise or provide Products and Services
  • Enable cross-context behavioral or targeted advertising
  • Research
Professional or employment-related information Current or past employment history, licenses and professional membership
  • Collected
  • Consumers give it to us
  • We get it from outside sources
  • Offer, market, advertise or provide Products and Services
  • Enable cross-context behavioral or targeted advertising
  • Research
Categories
Identifiers

Examples
Name, postal address, email address, account name, Social Security number, driver’s license number, passport number, taxpayer identification number, IP address, device IDs

Collected or created

  • Collected

 

Source

  • Consumers give it to us
  • We automatically get it
  • We get it from outside sources

 

Purpose of collection and use

  • Offer, market, advertise or provide Products and Services
  • Provide to or receive information from credit reporting agencies
  • Enable billing and payment processing
  • Prevent fraud
  • Enable cross-context behavioral or targeted advertising
  • Conduct research

 

Characteristics of protected classification under state or federal law

Examples
Name, postal address, email address, account name, Social Security number, driver’s license number, passport number, taxpayer identification number, IP address, device IDs

Collected or created

  • Collected

 

Source

  • Consumers give it to us
  • We automatically get it
  • We get it from outside sources

 

Purpose of collection and use

  • Offer, market, advertise or provide Products and Services
  • Provide to or receive information from credit reporting agencies
  • Enable billing and payment processing
  • Prevent fraud
  • Enable cross-context behavioral or targeted advertising
  • Conduct research

 

Commercial information

Examples
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies

Collected or created

  • Collected and created

 

Source

  • We automatically get it
  • We get it from outside sources

 

Purpose of collection and use

  • Offer, market, advertise or provide Products and Services
  • Provide to or receive information from credit reporting agencies
  • Enable billing and payment processing
  • Prevent fraud
  • Enable cross-context behavioral or targeted advertising
  • Conduct research

 

Geolocation data

Examples
Street address, ZIP code and device location

Collected or created

  • Collected

 

Source

  • Consumers give it to us
  • We automatically get it

 

Purpose of collection and use

  • Offer, market, advertise or provide Products and Services
  • Prevent fraud
  • Provide to or receive information from credit reporting agency
  • Enable cross-context behavioral or targeted advertising
  • Conduct research
  • Perform analytics

 

Internet or other electronic network activity information

Examples
Browsing history, search history and information regarding an individual’s interaction with an internet website, application, or advertisement

Collected or created

  • Collected and created

 

Source

  • We automatically get it

 

Purpose of collection and use

  • Offer, market, advertise or provide Products and Services
  • Prevent fraud
  • Enable cross-context behavioral or targeted advertising
  • Conduct research

 

Inferences or audience segmentation

Examples
Individual profiles, preferences, characteristics, behaviors

Collected or created

  • Collected and created

 

Source

  • Consumers give it to us
  • We automatically get it
  • We get it from outside sources

 

Purpose of collection and use

  • Offer, market, advertise or provide Products and Services
  • Enable billing and payment processing
  • Prevent fraud/authenticate identity
  • Enable cross-context behavioral or targeted advertising
  • Conduct research

 

Audio, electronic, visual or similar information

Examples
Video surveillance, audio recordings, photographs, signatures associated with an account

Collected or created

  • Collected

 

Source

  • We automatically get it
  • Consumers give it to us

 

Purpose of collection and use

  • Provide security services
  • Prevent fraud/authenticate identity
  • Enable billing and payment processing
  • Enable quality control and improve processes for providing Products and Services
  • Conduct research
  • Offer, market, advertise or provide Products and Services

 

Biometric information

Examples
Fingerprint, voiceprint, or scan of face geometry, that is used to identify a specific individual

Collected or created

  • Collected and created

 

Source

  • Consumers give it to us

 

Purpose of collection and use

  • Prevent fraud and provide identity verification

 

Education information

Examples
Degree(s), actual or inferred level of education

Collected or created

  • Collected

 

Source

  • Consumers give it to us
  • We get it from outside sources

 

Purpose of collection and use

  • Offer, market, advertise or provide Products and Services
  • Enable cross-context behavioral or targeted advertising
  • Research

 

Professional or employment-related information

Examples
Current or past employment history, licenses and professional membership

Collected or created

  • Collected

 

Source

  • Consumers give it to us
  • We get it from outside sources

 

Purpose of collection and use

  • Offer, market, advertise or provide Products and Services
  • Enable cross-context behavioral or targeted advertising
  • Research

 

Information We Shared About Consumers

Here we describe the personal information we have collected over the past year and the purpose for which we shared or sold it. Note, some states define “sale” very broadly and include the sharing of personal information for anything of value. According to this broad definition, in the year before the date this policy was updated, we have sold or shared the following categories of personal information about at least some consumers:

Categories Collected or created Categories of companies we’ve shared with Purpose for sharing Purpose for selling
Identifiers Collected
  • Product and services delivery companies
  • Marketing services companies
  • Cloud storage companies
  • Credit reporting agencies
  • Billing, payment processing and collection companies
  • Fraud prevention and authentication/ identity verification entities
  • Analytics companies
  • Affiliates
  • Research entities
  • Product and services delivery
  • Marketing and advertising services
  • Data storage
  • Analytics and measurement
  • Fraud prevention/ identity verification
  • Billing, collections and payment processing
  • Cross-context behavioral or targeted advertising
  • Credit scoring and reporting
  • Research
  • Marketing and advertising
Characteristics of protected classification under state or federal law Collected
  • Cloud storage companies
  • Credit reporting agencies
  • Fraud prevention and authentication/ identity verification entities
  • Analytics companies
  • Research entities
  • Data storage
  • Credit scoring and reporting
  • Fraud prevention/ identity verification
  • Analytics and measurement
  • Research
  • Not sold
Commercial information Collected
  • Product and services delivery companies
  • Marketing services companies
  • Cloud storage companies
  • Credit reporting agencies
  • Billing and payment processing companies
  • Fraud prevention and authentication/ identity verification entities
  • Analytics companies
  • Affiliates
  • Research entities
  • Product and services delivery
  • Marketing and advertising
  • Data storage
  • Credit scoring and reporting
  • Billing, collections and payment processing
  • Fraud prevention/ identity verification
  • Analytics and measurement
  • Cross-context behavioral or targeted advertising
  • Research
  • Marketing and advertising
Internet or other electronic network activity information Collected
  • Marketing services companies
  • Analytics companies
  • Cloud storage companies
  • Research entities
  • Marketing and advertising
  • Analytics and measurement
  • Cross-context behavioral or targeted advertising
  • Data Storage
  • Research
  • Not sold
Geolocation data Collected
  • Product and services delivery companies
  • Marketing services companies
  • Cloud storage companies
  • Billing and payment processing companies
  • Fraud prevention and authentication/ identity verification entities
  • Analytics companies
  • Affiliates
  • Credit reporting agencies
  • Research entities
  • Product and services delivery
  • Marketing and advertising
  • Data storage
  • Billing, collections and payment
  • Fraud prevention/ identity verification
  • Analytics and measurement
  • Credit scoring and reporting
  • Research
  • Marketing and advertising (does not include Precise Geolocation)
Inferences or audience segmentation Collected and created
  • Marketing services companies
  • Cloud storage companies
  • Analytics companies
  • Research entities
  • Marketing and advertising
  • Data storage
  • Analytics and measurement
  • Research
  • Not sold
Audio, electronic, visual or similar information Collected
  • Analytics companies
  • Cloud storage companies
  • Fraud prevention/security companies
  • Marketing services companies
  • Product and services delivery companies
  • Research entities
  • Data storage
  • Fraud prevention/security
  • Research
  • Employee performance, evaluation, and coaching
  • Not sold
Biometric information Collected
  • Fraud prevention and authentication/ identity verification entities
  • Fraud prevention/identity verification
  • Not sold
Education information Collected
  • Research entities
  • Research
  • Not sold
Professional or employment-related information Collected
  • Credit reporting agencies
  • Fraud prevention and authentication/ identity verification entities
  • Research entities
  • Credit scoring and reporting
  • Fraud prevention/ identity verification
  • Research
  • Not sold
Categories
Identifiers

Collected or created
Collected

Categories of companies we've shared with

  • Product and services delivery companies
  • Marketing services companies
  • Cloud storage companies
  • Credit reporting agencies
  • Billing, payment processing and collection companies
  • Fraud prevention and authentication/ identity verification entities
  • Analytics companies
  • Affiliates
  • Research entities

 

Purpose for sharing

  • Product and services delivery
  • Marketing and advertising services
  • Data storage
  • Analytics and measurement
  • Fraud prevention/ identity verification
  • Billing, collections and payment processing
  • Cross-context behavioral or targeted advertising
  • Credit scoring and reporting
  • Research

 

Purpose for selling

  • Marketing and advertising

 

Characteristics of protected classification under state or federal law

Collected or created
Collected

Categories of companies we've shared with

  • Cloud storage companies
  • Credit reporting agencies
  • Fraud prevention and authentication/ identity verification entities
  • Analytics companies
  • Research entities

 

Purpose for sharing

  • Data storage
  • Credit scoring and reporting
  • Fraud prevention/ identity verification
  • Analytics and measurement
  • Research

 

Purpose for selling

  • Not sold

 

Commercial information

Collected or created
Collected

Categories of companies we've shared with

  • Product and services delivery companies
  • Marketing services companies
  • Cloud storage companies
  • Credit reporting agencies
  • Billing and payment processing companies
  • Fraud prevention and authentication/ identity verification entities
  • Analytics companies
  • Affiliates
  • Research entities

 

Purpose for sharing

  • Product and services delivery
  • Marketing and advertising
  • Data storage
  • Credit scoring and reporting
  • Billing, collections and payment processing
  • Fraud prevention/ identity verification
  • Analytics and measurement
  • Cross-context behavioral or targeted advertising
  • Research

 

Purpose for selling

  • Marketing and advertising

 

Internet or other electronic network activity information

Collected or created
Collected

Categories of companies we've shared with

  • Marketing services companies
  • Analytics companies
  • Cloud storage companies
  • Research entities

 

Purpose for sharing

  • Marketing and advertising
  • Analytics and measurement
  • Cross-context behavioral or targeted advertising
  • Data Storage
  • Research

 

Purpose for selling

  • Not sold

 

Geolocation data

Collected or created
Collected

Categories of companies we've shared with

  • Product and services delivery companies
  • Marketing services companies
  • Cloud storage companies
  • Billing and payment processing companies
  • Fraud prevention and authentication/ identity verification entities
  • Analytics companies
  • Affiliates
  • Credit reporting agencies
  • Research entities

 

Purpose for sharing

  • Product and services delivery
  • Marketing and advertising
  • Data storage
  • Billing, collections and payment
  • Fraud prevention/ identity verification
  • Analytics and measurement
  • Credit scoring and reporting
  • Research

 

Purpose for selling

  • Marketing and advertising (does not include Precise Geolocation)

 

Inferences or audience segmentation

Collected or created
Collected and created

Categories of companies we've shared with

  • Marketing services companies
  • Cloud storage companies
  • Analytics companies
  • Research entities

 

Purpose for sharing

  • Marketing and advertising
  • Data storage
  • Analytics and measurement
  • Research

 

Purpose for selling

  • Not sold

 

Audio, electronic, visual or similar information

Collected or created
Collected

Categories of companies we've shared with

  • Analytics companies
  • Cloud storage companies
  • Fraud prevention/security companies
  • Marketing services companies
  • Product and services delivery companies
  • Research entities

 

Purpose for sharing

  • Data storage
  • Fraud prevention/security
  • Research
  • Employee performance, evaluation, and coaching

 

Purpose for selling

  • Not sold

 

Biometric information

Collected or created
Collected

Categories of companies we've shared with

  • Fraud prevention and authentication/ identity verification entities

 

Purpose for sharing

  • Fraud prevention/identity verification

 

Purpose for selling

  • Not sold

 

Education information

Collected or created
Collected

Categories of companies we've shared with

  • Research entities

 

Purpose for sharing

  • Research

 

Purpose for selling

  • Not sold

 

Professional or employment-related information

Collected or created
Collected

Categories of companies we've shared with

  • Credit reporting agencies
  • Fraud prevention and authentication/ identity verification entities
  • Research entities

 

Purpose for sharing

  • Credit scoring and reporting
  • Fraud prevention/ identity verification
  • Research

 

Purpose for selling

  • Not sold

 

The Sensitive Personal Information We’ve Collected and the Purpose of its Collection, Sharing and Sale

Here we describe the sensitive personal information, as defined under California law, that we have collected about consumers over the past year. We list the purpose for which we collected it, the types of companies we’ve shared it with and why. AT&T has not sold Sensitive Personal Information.

Categories Purpose for collection Categories of companies we’ve shared with Purpose for sharing (making available constitutes a share)
Gov’t IDs: Social Security, driver's license, state Identification card, or passport number
  • Provide information to or receive information from credit reporting agencies
  • Prevent fraud/authenticate identity
  • Cloud storage companies
  • Credit reporting agencies
  • Fraud prevention and authentication/identity verification entities
  • Report to or receive information from credit reporting agencies
  • Prevent fraud /provide identity verification
Financial accounts & credentials: account log-In, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account
  • Enable billing and payment processing
  • Not Shared
  • Not Shared
Precise geolocation
  • Offer or provide Products and Services
  • Prevent fraud
  • Enable location and emergency services
  • Conduct research
  • Product and services delivery companies
  • Cloud storage companies
  • Fraud prevention and authentication/identity verification entities
  • Research entities (Provided in aggregate)
  • Offer, market, advertise or provide Products and Services
  • Provide location services
  • Prevent fraud
  • Research
Demographic, religious or occupational information: racial or ethnic origin, religious or philosophical beliefs, or union membership
  • Offer or provide Products and Services
  • Conduct research and development
  • Prepare aggregate insights
  • Marketing services companies
  • Research entities
  • Offer, market, advertise or provide Products and Services
  • Enable cross-context behavioral or targeted advertising
  • Research
Content of communications: The contents of an individual's Plain SMS text messages up to 48 hours and spam texts [Learn more], unless AT&T is the intended recipient of the communication
  • Network Operations
  • Not Shared
  • Not Shared
Biometric information: the processing of biometric Information for the purpose of uniquely identifying an individual
  • Prevent Fraud
  • Fraud prevention and authentication/identity verification entities
  • Prevent fraud/ provide identity verification
Children's data: Personal data collected from an individual who is known or is likely be under the age of 18
  • Offer or provide Products and Services
  • Enable location and emergency services
  • Prepare aggregate insights
  • Conduct research and development
  • Prevent fraud/authenticate identity
  • Product and services delivery companies
  • Cloud storage companies
  • Fraud prevention and authentication/identity verification entities
  • Research entities (Provided in aggregate)
  • Provide Products and Services
  • Provide location services
  • Prevent fraud
  • Research
Categories
Gov't IDs: Social Security, driver's license, state Identification card, or passport number

Purpose for collection

  • Provide information to or receive information from credit reporting agencies
  • Prevent fraud/authenticate identity

 

Categories of companies we've shared with

  • Cloud storage companies
  • Credit reporting agencies
  • Research

 

Purpose for sharing (making available constitutes a share)

  • Report to or receive information from credit reporting agencies
  • Prevent fraud /provide identity verification

 

Financial accounts & credentials: account log-In, financial account, debit .card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account

Purpose for collection

  • Enable billing and payment processing

 

Categories of companies we've shared with

  • Not Shared

 

Purpose for sharing (making available constitutes a share)

  • Not Shared

 

Precise geolocation

Purpose for collection

  • Offer or provide Products and Services
  • Prevent fraud
  • Enable location and emergency services
  • Conduct research

 

Categories of companies we've shared with

  • Product and services delivery companies
  • Cloud storage companies
  • Fraud prevention and authentication/identity verification entities
  • Research entities (Provided in aggregate)

 

Purpose for sharing (making available constitutes a share)

  • Offer, market, advertise or provide Products and Services
  • Provide location services
  • Prevent fraud
  • Research

 

Demographic, religious or occupational information: racial or ethnic origin, religious or philosophical beliefs, or union membership

Purpose for collection

  • Offer or provide Products and Services
  • Conduct research and development
  • Prepare aggregate insights

 

Categories of companies we've shared with

  • Marketing services companies
  • Research entities

 

Purpose for sharing (making available constitutes a share)

  • Offer, market, advertise or provide Products and Services
  • Enable cross-context behavioral or targeted advertising
  • Research

 

Content of communications: The contents of an individual’s Plain SMS text messages up to 48 hours and spam texts [Learn more], unless AT&T is the intended recipient of the communication

Purpose for collection

  • Network Operations

 

Categories of companies we've shared with

  • Not Shared

 

Purpose for sharing (making available constitutes a share)

  • Not Shared

 

Biometric information: the processing of biometric Information for the purpose of uniquely identifying an individual

Purpose for collection

  • Prevent Fraud

 

Categories of companies we've shared with

  • Fraud prevention and authentication/identity verification entities

 

Purpose for sharing (making available constitutes a share)

  • Prevent fraud/ provide identity verification

 

Children's data: Personal data collected from an individual who is known or is likely be under the age of 18

Purpose for collection

  • Offer or provide Products and Services
  • Enable location and emergency services
  • Prepare aggregate insights
  • Conduct research and development
  • Prevent fraud/authenticate identity

 

Categories of companies we've shared with

  • Product and services delivery companies
  • Cloud storage companies
  • Fraud prevention and authentication/identity verification entities
  • Research entities (Provided in aggregate)

 

Purpose for sharing (making available constitutes a share)

  • Provide Products and Services
  • Provide location services
  • Prevent fraud
  • Research