These additional state-specific privacy disclosures, which serve as a Notice at Collection under the California Privacy Rights Act, are required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act and are effective as of June 30, 2023:
Categories of personal information collected
. The personal information that we may collect, or may have collected from consumers in the preceding twelve months, fall into the following categories established by the California Privacy Rights Act, depending on how you engage with the AWS Offerings:
- Identifiers, such as your name, alias, address, phone numbers, or IP address, your AWS account log-in information, or a government-issued identifier (e.g., a state-issued ID number, which may be required to verify your identity when completing certain AWS certification courses, or an ID you provide for identity verification, which in some cases may reflect citizenship or immigration status);
- personal information as described in subdivision (e) of Section 1798.80 of the California Civil Code, such as a credit card number or other payment information;
- characteristics of protected classifications under California or US federal law, such as age, race, or gender, for example if we conduct user surveys or analysis;
- commercial information, such as purchase activity;
- internet or other electronic network activity information, including content interaction information, such as content downloads, streams, and playback details;
- biometric information, such as your voice or appearance, for example if you choose to participate in a demonstration of a speech or image recognition service;
- geolocation data, which may in some cases constitute precise geolocation information, such as the location of your device or computer, for example if you enable location services to enhance your experience through event applications we offer;
- audio, visual, electronic or other similar information, including when you communicate with us by phone or otherwise;
- professional or employment-related information, for example data you may provide about your business;
- inference data, such as information about your preferences; and
- education information, such as information about enrollment status, fields of study, or degrees, honors, and awards received.
We collect this information from you, automatically through your interaction with the AWS Offerings, or from third parties. For more information about the personal information we collect, click
here
. We collect this information for the business and commercial purposes described in the “How We Use Personal Information” section above.
Categories of personal information disclosed for a business purpose
. The personal information that we may have disclosed about consumers for a business purpose in the preceding twelve months fall into the following categories established by the California Privacy Rights Act, depending on how you engage with the AWS Offerings:
- Identifiers, such as your name, address, or phone numbers, for example if we use a third-party carrier to deliver AWS hardware, or government identifier or certain types of ID you provide for identity verification that may in some cases reflect your citizenship or immigration status, for example if we use a third-party service to verify your identity;
- personal information as described in subdivision (e) of Section 1798.80 of the California Civil Code, such as a credit card number or other payment information, for example if we use a third-party payment processor;
- information that may reveal your age, gender, race, or other protected classifications under California or US federal law, for example if we conduct user surveys or analysis using a third-party service provider;
- commercial information, such as the details of a product or service you purchased if a third-party service provider is assisting to provide that product or service to you;
- Internet or other electronic network activity information, such as if we use a third-party service provider to help us gather reports for analyzing the health of our devices and services;
- biometric information, for example if you choose to participate in a demonstration of certain AWS services facilitated by a third-party service provider;
- geolocation data, which may constitute precise geolocation data, for example if we enable transportation services from a third party in connection with an AWS event;
- audio, visual, electronic or other similar information, for example if a third-party service provider reviews recordings of customer support phone calls for quality assurance purposes;
- professional or employment-related information, for example if we provide information to a third-party service provider for verification or registration as part of the AWS Offerings;
- education information, for example if we facilitate employment or internship recruitment activities for participants in the AWS Educate program; and
- inference data, for example if we use a third-party service provider to store information about your preferences.
For more information about the personal information we may disclose for a business purpose, click
here
.
Your Data Rights
. You may have certain data rights under state privacy laws, including to request information about the collection of your personal information by us, to access your personal information in a portable format, and to correct or delete your personal information. If you wish to do any of these things and you are an AWS customer, please contact us
here
. If you are not an AWS customer, or you are an authorized agent under applicable state law, please contact us
here
or at the address under
Contacts, Notices, and Revisions
above. Additionally, you may have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a data request. Depending on your data choices, certain services may be limited or unavailable.
To ensure the security of your AWS account, we will generally ask you to verify your request using the contact information you have already provided. If you are an authorized agent making a request on behalf of a consumer pursuant to applicable state law, we may ask you to provide information verifying you have proper authority to make the request on behalf of the consumer or we may ask the consumer to verify their identity with us directly.
No sale or sharing of personal information
. We do not sell or share any personal information of consumers, as those terms are defined under the California Privacy Rights Act.
California Privacy Rights Act Sensitive Personal Information Disclosure
. The categories of data that we collect and disclose for a business purpose include “sensitive personal information” as defined under the California Privacy Rights Act. We do not use or disclose sensitive personal information for any purpose not expressly permitted by the California Privacy Rights Act.
California Privacy Rights Act Retention Disclosure
. We keep your personal information to enable your continued use of AWS Services, for as long as it is required in order to fulfill the relevant purposes described in this AWS Privacy Notice, as permitted or as may be required by law, or as otherwise communicated to you.
California Privacy Rights Act Non-Discrimination Statement
. We will not discriminate against any consumer for exercising their rights under the California Privacy Rights Act.
California Privacy Rights Act, Colorado Privacy Act, Connecticut Data Privacy Act, Virginia Consumer Data Protection Act, and Utah Consumer Privacy Act De-identified Data Disclosure
. AWS may use de-identified data in some instances. AWS either maintains such data without attempting to re-identify it or treats such data as personal data subject to applicable law.
Colorado Privacy Act Profiling Disclosure
. We do not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act.