Bank of America U.S. Online Privacy Notice changes — 20220301_rev01

136

137

#### Reminder

138

139

Please note that if you opt out of this advertising:

140

141

- You may still receive general advertising from Bank of America.

142

- When accessing online account servicing areas (i.e. after sign-in), such as Online Banking, Merrill Edge or MyMerrill, you may receive tailored content and advertising based on your account relationships.

142

- When accessing online account servicing areas (i.e. after login), such as Online Banking, Merrill Edge or MyMerrill, you may receive tailored content and advertising based on your account relationships.

143

- Financial advisors/Client Managers may continue to use personal information collected online as described in this Notice to provide details on products and services in accordance with account agreements.

144

- In order for online behavioral advertising opt outs from our Sites and Mobile Apps and on other sites to work on your device, your browser must be set to accept cookies.

145

- If you delete cookies, buy a new device, access our Sites and Mobile Apps or other sites from a different device, login under a different screen name, or change web browsers, you will need to opt out again.

146

147

### Additional Information

148

149

#### Third Party Data Sharing

150

151

Some companies may offer aggregation websites and services that allow you to share your data with them in order to consolidate your account information from different sources (such as your accounts with us or with other financial institutions) so that you can view it in one location or perform actions related to your accounts using their services. To do this, a third party may request you to authorize access to your Bank of America accounts by providing your Bank of America username and passcode or by providing your information-sharing consent directly to Bank of America.

151

Some companies may offer aggregation websites and services that allow you to share your data with them in order to consolidate your account information from different sources (such as your accounts with us or with other financial institutions) so that you can view it in one location or perform actions related to your accounts using their services. To do this, a third party may request you to authorize access to your Bank of America accounts by providing your Bank of America username and password or by providing your information-sharing consent directly to Bank of America.

152

153

- The third party may access, on your behalf, information about yourself, your Bank of America relationship, and your accounts at Bank of America.

154

- You should use caution and ensure that the third party has appropriate policies and practices to protect the privacy and security of any personal information you provide or to which they are gaining access.

155

- Use of your information by the third party is governed by your agreement with them, not by Bank of America.

156

- We are not responsible for the use or disclosure of any personal information accessed by any company or person to whom you provide your site username and passcode.

157

- If you share your Bank of America username, passcode or other information about your accounts with others, we will consider that you have authorized any transaction or action initiated by using the access information you provide.

158

- If you decide to revoke the authority you have given to a third party, we strongly recommend that you change your Bank of America passcode to ensure that the third party cannot continue to access your account.

156

- We are not responsible for the use or disclosure of any personal information accessed by any company or person to whom you provide your site username and password.

157

- If you share your Bank of America username, password or other information about your accounts with others, we will consider that you have authorized any transaction or action initiated by using the access information you provide.

158

- If you decide to revoke the authority you have given to a third party, we strongly recommend that you change your Bank of America password to ensure that the third party cannot continue to access your account.

159

- You may revoke your consent for certain third parties through the Security Center within [Bank of America Online Banking](https://www.bankofamerica.com/).

160

161

#### Social Media

162

163

Bank of America engages with customers on social media platforms such as Facebook®, Twitter®, YouTube® and LinkedIn®.

164

 The type of personal information we collect from and about you online will depend on how you interact with us and may include:
 - **Contact Information** such as name, mailing address, email address, telephone and mobile number(s)
 - **Account Application information** such as credit and income information
 - **Identifiers** such as social security number, account number(s), driver's license number (or comparable) or other information that identifies you for ordinary business purposes
+- **Access Authorization** such as user name, alias, PIN and passcode and security questions and answers
+- **Access Authorization** such as user name, alias, PIN and password and security questions and answers
 - **Information from your computer and mobile devices where allowed by individual browsers and/or operating systems**, such as:
 - Unique device identifiers (for example Media Access Control (MAC) and Internet Protocol (IP) addresses)
 - Browser type, version, language, and display/screen settings
 - Information about how you use and interact with our Sites and Mobile Apps (for example activities on pages visited, links clicked or unique and measurable patterns such as keystrokes, mouse clicks and movements, swipes and gestures)
 - Responses to advertisements on sites and mobile apps where we advertise
 #### Reminder
 Please note that if you opt out of this advertising:
 - You may still receive general advertising from Bank of America.
+- When accessing online account servicing areas (i.e. after sign-in), such as Online Banking, Merrill Edge or MyMerrill, you may receive tailored content and advertising based on your account relationships.
+- When accessing online account servicing areas (i.e. after login), such as Online Banking, Merrill Edge or MyMerrill, you may receive tailored content and advertising based on your account relationships.
 - Financial advisors/Client Managers may continue to use personal information collected online as described in this Notice to provide details on products and services in accordance with account agreements.
 - In order for online behavioral advertising opt outs from our Sites and Mobile Apps and on other sites to work on your device, your browser must be set to accept cookies.
 - If you delete cookies, buy a new device, access our Sites and Mobile Apps or other sites from a different device, login under a different screen name, or change web browsers, you will need to opt out again.
 ### Additional Information
 #### Third Party Data Sharing
+Some companies may offer aggregation websites and services that allow you to share your data with them in order to consolidate your account information from different sources (such as your accounts with us or with other financial institutions) so that you can view it in one location or perform actions related to your accounts using their services. To do this, a third party may request you to authorize access to your Bank of America accounts by providing your Bank of America username and passcode or by providing your information-sharing consent directly to Bank of America.
+Some companies may offer aggregation websites and services that allow you to share your data with them in order to consolidate your account information from different sources (such as your accounts with us or with other financial institutions) so that you can view it in one location or perform actions related to your accounts using their services. To do this, a third party may request you to authorize access to your Bank of America accounts by providing your Bank of America username and password or by providing your information-sharing consent directly to Bank of America.
 - The third party may access, on your behalf, information about yourself, your Bank of America relationship, and your accounts at Bank of America.
 - You should use caution and ensure that the third party has appropriate policies and practices to protect the privacy and security of any personal information you provide or to which they are gaining access.
 - Use of your information by the third party is governed by your agreement with them, not by Bank of America.
+- We are not responsible for the use or disclosure of any personal information accessed by any company or person to whom you provide your site username and passcode.
+- If you share your Bank of America username, passcode or other information about your accounts with others, we will consider that you have authorized any transaction or action initiated by using the access information you provide.
+- If you decide to revoke the authority you have given to a third party, we strongly recommend that you change your Bank of America passcode to ensure that the third party cannot continue to access your account.
+- We are not responsible for the use or disclosure of any personal information accessed by any company or person to whom you provide your site username and password.
+- If you share your Bank of America username, password or other information about your accounts with others, we will consider that you have authorized any transaction or action initiated by using the access information you provide.
+- If you decide to revoke the authority you have given to a third party, we strongly recommend that you change your Bank of America password to ensure that the third party cannot continue to access your account.
 - You may revoke your consent for certain third parties through the Security Center within [Bank of America Online Banking](https://www.bankofamerica.com/).
 #### Social Media
 Bank of America engages with customers on social media platforms such as Facebook®, Twitter®, YouTube® and LinkedIn®.

U.S. Online Privacy Notice

Full text changes — 20211201_rev01 to 20220301_rev01