U.S. Consumer Privacy Notice

1. About this Privacy Notice

Pursuant to the California Consumer Privacy Act (“CCPA"), Colorado Privacy Act, Connecticut Data Privacy Act, Montana Consumer Data Privacy Act, Oregon Consumer Privacy Act, Texas Privacy and Data Security Act, Utah Consumer Privacy Act and Virginia Consumer Data Protection Act, and their respective implementing regulations (collectively, “U.S. Consumer Privacy Laws”), LexisNexis Risk Solutions Inc. and the LexisNexis Risk Solutions companies in scope of the U.S. Consumer Privacy Laws (“LNRS,” “we,” “us” or “our”) are providing this U.S. Consumer Privacy Notice (“Notice”). This Notice supplements our Privacy Policy and applies solely to California, Colorado, Connecticut, Montana, Oregon, Texas, Utah and Virginia consumers, except as otherwise noted.  Terms used but not defined shall have the meanings ascribed to them in the applicable U.S. Consumer Privacy Laws. This Notice does not apply to personal information that we process as a service provider on behalf of our customers or that we collect from job applicants, contractors or employees.

2. Personal Information Collected, Processed and Disclosed

We collect, and have collected in the preceding 12 months, the following categories of personal information:

We collect this personal information from you and from other categories of sources such as: our affiliates; our customers; public and publicly available sources; our third-party resellers and referral partners, data suppliers and service providers; partners with which we offer co-branded services or engage in joint event or marketing activities; social networks; news outlets and related media; and the organization with which you are employed or affiliated.

We may use or process each of the above categories of personal information to operate, manage, and maintain our business, to provide our products and services, to communicate with you, for our vendor management purposes, and to accomplish our business purposes and objectives, including, for example, using personal information to: develop, improve, repair, and maintain our products and services; process or fulfill a request or other transactions submitted to us; personalize, advertise, and market our products and services; conduct research, analytics, and data analysis; maintain our facilities and infrastructure; undertake quality and safety assurance measures; conduct risk and security control and monitoring; detect and prevent fraud; perform identity verification; perform accounting, audit, and other internal functions; comply with law, legal process, and internal policies; maintain records; exercise and defend legal claims; and fulfill legal obligations.

We disclose, and have disclosed in the preceding 12 months, each of the above categories of personal information for our operational business purposes to all of the following categories of third parties: affiliates; customers; service providers, agents and representatives; joint venture partners; and other parties where required by law or to protect our rights.

Subject to your consent where required by applicable law, we may use sensitive personal information specifically for the following purposes: perform our services or provide products or services as requested by you or our customers; prevent, detect and investigate security incidents or malicious, deceptive, fraudulent or other illegal actions; short-term, transient use such as displaying first party, non-personalized advertising; perform services on our own behalf, such as maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, or providing analytic services, storage or similar services for the business; and activities relating to quality and safety control or product improvement.

3. Personal Information Sold

We sell, and have sold in the preceding 12 months, each of the following categories of personal information to our customers including insurance companies, financial institutions, government agencies, healthcare institutions, collections and recovery agencies, and other third parties such as advertising networks, internet service providers, data analytics providers, operating systems and platforms, social networks, and entities associated with consumer reporting agencies:

We do not knowingly sell the personal information, including the sensitive personal information, of minors under 16 years of age within the scope of the application of the U.S. Consumer Privacy Laws.

4. Personal Information Shared

We share for purposes of cross-context behavioral advertising or targeted advertising, and have shared for such purposes, including in the preceding 12 months, each of the following categories of personal information with advertising networks, internet service providers, data analytics providers, operating systems and platforms, and social networks:

We do not knowingly share the personal information, including the sensitive personal information, of minors under 16 years of age within the scope of the application of the U.S. Consumer Privacy Laws.  

5. Retention

We retain your personal information for as long as necessary to provide our services and fulfill the transactions you have requested, or for other essential purposes such as complying with our legal obligations, maintaining business and financial records, resolving disputes, maintaining security, detecting and preventing fraud and abuse, and enforcing our agreements. The criteria used to determine retention periods includes the legal limitation of liability period, agreed contractual provisions, applicable regulatory requirements, and industry standards.

6. Consumer Rights and Requests

You may request to know whether we process your personal information and to access such personal information.

In addition, if you are a California resident, you may request that we disclose to you the following information as required by law: (i) the categories of personal information we collected about you and the categories of sources from which we collected such information; (ii) the business or commercial purpose for collecting, selling or sharing personal information about you; (iii) the categories of personal information about you that we sold or shared and the categories of third parties to whom we sold or shared such information; and (iv) the categories of personal information about you that we otherwise disclosed, and the categories of third parties to whom we disclosed such personal information.

If you are an Oregon resident, you may also request that we disclose to you (i) the categories of personal information we process about you and (ii) the third parties to which we have disclosed your personal information.

You may request to correct inaccuracies in your personal information.

You may request to receive a copy of your personal information, including specific pieces of personal information, including, where applicable, to obtain a copy of your personal information in a portable, readily usable format.

You may request that we delete your personal information, subject to certain exceptions. If you are a California or Utah resident, this applies to personal information collected from you.

You may request to “opt-out” of your personal information being sold to certain third parties, as defined by applicable law. This right may be exercised by submitting a Do Not Sell or Share My Personal Information request.

Our use of tracking technologies through some of our websites may be considered a sale or sharing of your personal information for cross-context behavioral advertising or targeted advertising under the U.S. Consumer Privacy Laws. You may request to opt-out of such tracking technologies by utilizing the “Cookie Settings” link on our websites that use tracking technologies for cross-contextual behavioral advertising or targeted advertising or by sending an opt-out preference signal supported by your device or browser. Your use of an opt-out preference signal will apply only to your device or browser and not to other personal information that is not linked to your device or browser.

If you are a Colorado, Connecticut, Oregon, Texas or Virginia resident, you may request to opt out of the processing of your personal information for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

If you are a California resident, you may also request to limit the use or disclosure of your sensitive personal information to what is necessary for us to perform our services and provide goods as requested, as authorized by regulations, or as otherwise permitted under the CCPA. This right may be exercised by submitting a Limit the Use of My Sensitive Personal Information request.

We will not unlawfully discriminate against because you exercise any of your rights under the U.S. Consumer Privacy Laws.

We do not offer financial incentives or price or service differences to consumers in exchange for the retention or sale of a consumer’s personal information.

7. How to Make a Request

You may make a request for the disclosures, correction, opt-out, or deletion described above through our U.S. Consumer Privacy Homepage, via phone (1-888-217-1591), or via U.S. Mail:

LexisNexis Risk Solutions Consumer Center
Attn: U.S. Consumer Privacy Request
P.O. Box 105108
Atlanta, GA 30348-5108
USA

You may be required to submit proof of your identity for certain of these requests to be processed. Such information may include your First Name, Last Name, Street Address, City, Zip, and Date of Birth and either your Social Security Number or your Driver’s License Number and State. This information will be used only for the purposes of verifying your identity and processing your request. We may not be able to comply with your request if we are unable to confirm your identity or to connect the information you submit in your request with personal information in our possession.

Authorized Agents

You may designate an authorized agent to make a request on your behalf subject to proof of identity and written authorization as required under the U.S. Consumer Privacy Laws, as applicable. Requests made through an authorized agent should be made to our consumer center via phone (1-888-497-0011) or by email at consumer.documents@lexisnexis.com. As part of our verification process, we may request that the agent provide, as applicable, proof concerning his or her status as an authorized agent. In addition, we may require that you verify your identity as described above or confirm that you provided the agent permission to submit the request.

We will respond to your request consistent with the U.S. Consumer Privacy Laws, as applicable.

Appeal Process

If we refuse to act on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal. You may file an appeal by contacting us via through our Online Portal or 1-888-217-1591.

8. State-Specific Privacy Notices

We compile certain metrics related to CCPA consumer requests for the previous calendar year which are available here.

LexisNexis Risk Solutions is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrants is available on the Texas SOS website at https://www.sos.state.tx.us.

LexisNexis Risk Solutions is also registered as a “data broker” as that term is defined under the laws of California, Oregon, and Vermont. Information about data broker registrants is available from the respective state data broker registry websites.

9. De-Identified Information

Where we maintain or use de-identified data, we will continue to maintain and use the de-identified data only in a de-identified fashion and will not attempt to re-identify the data.

10. Changes

We will update this Notice from time to time. Any changes will be posted on this page with an updated revision date.

11. Contact

You may make a rights request described above through our U.S. Consumer Privacy Homepage.

If you have any questions, comments, or complaints regarding this privacy policy or our processing of your information, please contact:

Privacy Manager
LexisNexis Risk Solutions Inc.
1000 Alderman Drive
Alpharetta, GA 30005
USA
privacy@lexisnexisrisk.com

Last updated: October 1, 2024