Consumer Health Data Privacy Notice – State of Washington

At AT&T, safeguarding your privacy is our priority. We value our customers and respect your privacy choices. We create connections to what you need to thrive in your everyday life. In doing so, we may collect health data covered by a state law in Washington (“the Washington law”).

Some types of the data we collect could be considered Consumer Health Data under the Washington law. In this Notice, we provide the categories of Consumer Health Data, as well as the categories of sources of such data, the purpose for which we’ve collected it and how we use it. We also provide the categories of Consumer Health Data that are shared and the list of categories of third parties and affiliates with whom we may share Consumer Health Data.

The Consumer Health Data We Collect

The data we collect depends on how you interact with us, the services you use, and the choices you make. Based on the definition of Consumer Health Data in the Washington law, some of the categories of data we collect could be considered Consumer Health Data.

Categories of Data	Source, Purpose and Use of Data
Accommodations and Accessibility Data Example: Your request for an AT&T Accessibility Plan	We may collect Consumer Health Data such as the nature of the disability or health condition from you to qualify you for the AT&T Accessibility Plan, which does things like provide telecommunications services for those who are hard of hearing.
Health and Safety Data Example: Information about accidents or injury that occur in our stores, on our property or related to the products and services we provide	We may collect Consumer Health Data from you to use in connection with accidents or health emergencies in our stores, offices or associated with the products and services we offer.
Biometric Data Example: Information generated from the measurement of an individual’s physical or behavioral characteristics that can be used to identify that person, such as the person’s face or voice	We may collect biometric data from you or other sources. For example, biometric data may be used to identify and authenticate consumers in connection with certain authentication programs or for security related purposes, including to protect against fraud or theft.

How We Use Consumer Health Data

We use the Consumer Health Data we collect to provide you with products and services, and where required, we collect your consent to use Consumer Health Data for other purposes.

How We Share Consumer Health Data and the Categories of Third Parties with Whom We Share It

This section provides details about who we share information with and the reasons why. We generally share information when you ask us to do so or as necessary to provide products or services.

We may share Consumer Health Data with the following categories of non-AT&T companies or entities:

Service providers. Vendors or agents working on our behalf to help us provide products or services.
Affiliates. We may share personal information, which may include Consumer Health Data, with AT&T’s family of companies where necessary to provide our products and services.
Other entities, like safety and security agencies. In certain circumstances, it may be necessary to provide Consumer Health Data to comply with court orders, subpoenas, and lawful discovery requests, and as otherwise authorized or required by law. Like all companies, we must comply with legal requirements. You can learn more in our Transparency Report.
Parties to a corporate transaction. If we were to sell or negotiate to sell our business to a buyer or buyers, we may transfer your personal information, which may include Consumer Health Data, to a successor or affiliate as part of that transaction.

We do not sell Consumer Health Data except with a valid authorization.

Your Consumer Health Data Choices

You have rights regarding your Consumer Health Data, including the right to access your Consumer Health Data, the right to ask us to delete your Consumer Health Data, and the right to withdraw any Consumer Health Data opt-in consents you may give us. You may also have more choices regarding your Consumer Health Data within the app or devices collecting it. To exercise your rights, please submit your Health Data request through our inquiry page in the data request center, choose “I have other data privacy issues” in the drop-down menu. If your request to exercise a right is denied, you may appeal that decision by contacting us.

For other information on AT&T’s privacy practices, please read the AT&T Privacy Notice.

Data Retention and Security

We keep your information as long as we need it for business, tax or legal purposes. We set our retention periods based on things like what type of personal information it is, how long it’s needed to operate the business or provide our products and services, and whether it’s subject to contractual or legal obligations. These obligations might be ongoing litigation, mandatory data retention laws or government orders to preserve data for an investigation. After that, we destroy it by making it unreadable or indecipherable.

Any changes in how we process Consumer Health Data or your rights will be updated in this Notice and consistent with our Privacy Notice. If that happens, we will revise the “Effective Date” at the top of this Notice.

You can contact us with questions about this notice at privacypolicy@att.com. You can also write us at AT&T Privacy Notice, Chief Privacy Office, 208 S. Akard, Room 2901, Dallas, TX, 75202.