California Consumer Privacy Act

Notice at Collection of Personal Information

Under the California Consumer Privacy Act (“CCPA”), as a California resident (“you” or “your”), you have the right to know the following categories of personal information that Regions (“we” or “us”) collects about consumers who are job applicants to, employees of, owners of, directors of, officers of, or contractors of Regions. You also have the right to know the business or commercial purposes for which we use this personal information. This notice identifies the categories of personal information we collect and how we use the information.

We may collect the following categories of personal information:

• Identifiers. This may include a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
• Personal information described in the California Customer Records Statute (Cal. Civ. Code § 1798.80(e)). This may include a name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.
• Characteristics of Protected Classification under California or Federal Law. This may include age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
• Commercial information. This may include records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Biometric information. This may include genetic, physiological, biological, or behavioral characteristics that can be used, singly or in combination with each other or with other identifying data, to establish your identity, including deoxyribonucleic acid (DNA), fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
• Internet or other similar network activity. This may include browsing history, search history, or information on a consumer's interaction with a website, application, or advertisement.
• Geolocation data. This may include physical location or movements.
• Sensory data. This may include audio, electronic, visual, thermal, olfactory, or similar information.
• Professional or employment-related information. This may include current or past job history or performance evaluations.
• Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99)). This may include education records directly related to a student maintained by an educational institution or party acting on its behalf, such as report cards, transcripts, class lists, student schedules, student identification codes, student financial information, and student disciplinary records.
• Inferences drawn from other personal information. This may include information, data, assumptions, or conclusions derived from facts, evidence, or another source of information or data reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.

We may use your personal information for the following business or commercial purposes:

• Employee Services: We use personal information to perform background checks necessary to comply with licensing requirements, to perform reference checks, to verify eligibility to work in the United States, for contact purposes, to assess your qualification for employment, to conduct performance evaluations, for payrolls and budgeting purposes, for implementation of employee benefits, for internal organizational purposes to establish proper accommodations for sick time, PTO, leaves of absences, or emergency situations, and to conduct health screenings as allowed by OSHA and the CDC to protect the safety of our employee during pandemic situations.
• Security and Fraud Detection: We use personal information for our security and fraud detection services including detecting security incidents, protect against malicious, deceptive, fraudulent, or illegal activity; and prosecuting those responsible for that activity.
• Debugging: We use personal information to engage in debugging to identify and repair errors that impair existing intended functionality.
• Improvement of Services: We use personal information to verify, maintain, and improve our services.
• Internal Research: We use personal information for our internal research related to technological development and demonstration.
• Legal Obligations: We use personal information to comply with legal obligations.
• Audits: We use personal information to audit current interactions with you and related transactions.
• Advertising and Marketing Services: We use personal information to provide advertising or marketing services on our own behalf. Those would include advertising and marketing certain products to you that you may qualify for because you are a Regions employee.
• Merger/Acquisition/Bankruptcy, etc.: We may use your personal information as part of a merger, acquisition, bankruptcy, or other transaction where a third party assumes control of us.
• Commercial/Economic Interests: We use personal information to advance our commercial or economic interest.

We will not use your personal information for purposes materially different than those listed above. If we will use your personal information for purposes materially different than what is listed above, we will notify you of the new use and obtain your explicit consent for the new use.

Note that we do not collect the personal information of minors under the age of 16.

If you have any questions, please contact us at HRContact@regions.com