US Data Processing Activities
nature and purpose of personal information processing
In the course of providing products and services (“services”) to its customers, Verizon, its affiliates (“Verizon”), and its vendors and partners may need to process personal information as defined in the California Consumer Protection Act (“CCPA”) and other privacy laws within the United States. This page provides business customers with information regarding Verizon’s key US services and the nature of processing where the CCPA or similar privacy laws are applicable.
When Verizon is a business under the CCPA
Verizon processes the personal information of business representatives for administrative purposes in order to manage the relationship with its customers. In such circumstances, Verizon is a business under the CCPA because it “determines the purposes and means of processing of” personal information that will be used. Personal information processed for these purposes will be retained in accordance with applicable law and/or Verizon records retention policies unless otherwise stated in the customer agreement.
In addition, in a limited set of circumstances, Verizon may be considered a business under the CCPA in the course of providing services. This will occur when Verizon is providing services where Verizon determines how the personal information should be processed in order to provide the service.
When Verizon is a processor
In most cases, when providing services to business customers, Verizon will be a service provider under the CCPA or a processor under other privacy laws. This means that Verizon will act on the instructions of the customer with regards to the personal information.
What types of personal information does Verizon process as a business under the CCPA?
Verizon will process a limited amount of personal information in its role as a business under the CCPA. This will include: business representative contact and service information such as call detail records, location information, and IP address.
What types of personal information does Verizon process as a service provider/processor?
The type of data processed by Verizon will depend on the nature of the service. However, when processing personal information on behalf of its customers, Verizon is likely to process: IP address, call detail, names, business email addresses, business telephone numbers, and other product-specific data.
Verizon Connect will process additional types of personal information when providing services. This may include the following data elements that are necessary to provide telematics service: end user email address, IP address, and geo-location data. In addition, a customer may elect to include optional data elements (e.g., Driver's License details).
Data retention
Where a specific data retention period is not defined for a service in the tables linked below, the retention period may be agreed to as part of the contractual negotiations on an individual customer basis and detailed in that contract.
Privacy contact details
For queries regarding data processing activities please submit the following webform: https://www.verizon.com/about/privacy/privacy-inquiries
Security
Please refer to the Verizon Security Summary for a description of the technical and organizational security measures that Verizon implements to comply with its obligations under applicable laws.
Where additional security measures are necessary for particular services, these will be detailed in the customer’s contractual documentation.
US description of processing of personal information by Verizon for services as a service provider or processor for a customer
Please note that if you cannot find your service listed in the links below, you should contact your account team who can provide you with additional information where applicable.
US description of processing of personal information
Verizon Connect description of processing of personal information
For further information regarding how Verizon will protect your data please see the Verizon Privacy Policy