California Consumer Privacy Act Notice
LAST UPDATED: August 10, 2023
This California Consumer Privacy Act (“CCPA”) Privacy Policy and Notice at Collection (“CCPA Notice”) is provided on behalf of American International Group and other companies controlled by, or under common control with American International Group, including companies with the American International Group name or branding (referred to hereinafter as “AIG,” “we” or “our”). We are providing this CCPA Notice in accordance with our obligations under applicable law and as part of our commitment to handling your personal information responsibly and transparently. Please review this CCPA Notice to understand our privacy practices, including what personal information we collect, why we collect it, how we collect it, and how you can exercise your rights with respect to your personal information.
This CCPA Notice applies to individuals associated with corporations, partnerships, other non-individual clients, and other non-client individuals who are California residents and whose personal information AIG collects. This CCPA Notice should be read in conjunction with any other privacy notices you receive from other AIG companies.
This CCPA Notice is not applicable to current and former individual clients of AIG who purchased or are seeking to purchase products primarily for personal, family or household use such as life insurance, retirement products, homeowner’s insurance, travel insurance, etc. If you are an individual client who has obtained or is covered by such a product or service from AIG, federal law requires that we provide you with a separate notice at the establishment of the customer relationship and annually thereafter, which explains what personal information we collect and what rights you may exercise with respect to your personal information.
If you are not a California resident or this CCPA Notice does not otherwise apply to you, please refer to https://www.aig.com/privacy-policy for more information about how AIG handles personal information.
1. What Personal Information Does AIG Collect and How Does AIG Share, Sell or Disclose This Information?
The types of personal information we collect may vary depending on your relationship with us. Similarly, depending on your relationship with us, we may disclose your personal information for the purposes described in Section 3 to one or more of the categories of recipients in the chart below. The following chart details which categories of personal information we disclose to third parties for our operational business purposes, including within the 12 months preceding the date this notice was last updated. The chart also details the categories of personal information that we “sell” or “share” for purposes of cross-context behavioral advertising, including within the 12 months preceding the date this notice was last updated. For context, the CCPA defines a “sale” broadly as any disclosure of personal information for payment or other valuable consideration, including certain types of targeted advertising. The CCPA defines “sharing for cross-context behavioral advertising” as the disclosure of personal information for retargeting or other interest-based advertising.
| Category | Third Parties to Whom We Disclose Personal Information for Business Purposes | Third Parties to Whom We Sell Personal Information | Third Parties with Whom We Share Personal Information for Cross-Context Behavioral Advertising |
|---|---|---|---|
| Identifiers, such as name, online identifiers |
|
|
|
| Personal information, as defined in the California customer records law, such as insurance policy number, education, employment, employment history, financial information and medical information |
|
|
|
| Characteristics of protected classifications under California or federal law, such as sex, age, race, religion, national origin, disability, medical conditions and information, citizenship, immigration status and marital status |
|
|
|
| Commercial information, such as transaction information and history |
|
|
|
| Internet or network activity information, to the extent you visit our websites or use our software applications, such as browsing history and interactions with our and other websites and systems |
|
|
|
| Geolocation data, to the extent you use our mobile applications and choose to share your device geolocation data |
|
|
|
| Audio, electronic, visual, and similar information, such as photographs or video recordings created in connection with our business activities, and recordings of calls to our representatives and call centers |
|
|
|
| Inferences drawn from any of the personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics |
|
|
|
| Sensitive personal information such as Social Security number, driver’s license information, state identification information, or passport number; account log-in details, financial account information, passwords, or credentials allowing access to an account; precise geolocation information; racial or ethnic origin, religious or philosophical beliefs, citizenship, immigration status, or union membership |
|
|
|
We may disclose your personal information to third parties in connection with any reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with any bankruptcy or similar proceeding).
We do not knowingly sell or share for cross-context behavioral advertising purposes the personal information of minors under 16 years of age.
We retain each category of personal information that we collect for as long as needed or permitted in light of the purpose(s) for which it was collected. The criteria used to determine our retention periods include:
- The length of time we have an ongoing relationship with you (for example, for as long as we interact with you in the context of your company’s relationship with us) and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise;
- Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep various records for a certain period of time before we can delete them); or
- Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
Purposes for the Collection, Use, and Disclosure of Sensitive Personal Information
We may collect, use, and disclose sensitive personal information for the limited purposes permitted under the CCPA, such as performing services for our business, providing goods or services as requested by your employer, ensuring the security and integrity of our business, infrastructure, and the individuals we interact with, short term transient use such as displaying first party, non-personalized advertising, order processing and fulfillment, servicing accounts, providing customer service, verifying customer information, processing payments, providing financing, and service improvement.
2. What Are AIG’s Sources of Personal Information?
We collect the personal information described above directly from you such as through your transactions with AIG and our business partners, and your interactions with us on our websites and social media pages. We also collect this personal information from other categories of sources such as publicly available databases, consumer reporting agencies, commercially available sources, third parties authorized by you such as doctors, financial advisors, and prior and current employers, when they share the information with us.
3. For What Purposes Does AIG Collect, Use, Sell, Share or Otherwise Disclose Personal Information?
Depending on your relationship with us, we may collect, use, sell, share or otherwise disclose the personal information described above for the following purposes:
- to operate, manage, and maintain our business, such as to make insurance decisions, communicate with you and others as part of our business, provide our products and services, and maintain records;
- to develop and improve our products and services, such as to undertake quality and safety assurance measures, audit customer interactions, facilitate social sharing functionality, resolve complaints, and evaluate customer service;
- for our vendor management purposes;
- for security purposes, such as to maintain our facilities and infrastructure, protect against malicious, deceptive, or fraudulent activity, and conduct internal investigations;
- for monitoring purposes, such as to establish the existence of facts, maintain compliance with regulatory or self-regulatory practices, or for other purposes permissible under applicable law;
- to operate, maintain and improve our websites and other online services or applications;
- to perform other necessary and appropriate internal functions, such as accounting and auditing;
- to report to credit bureaus;
- to conduct research, analytics, and data analysis, and for marketing purposes, such as to advertise and market our products and services and administer contests and promotions, in accordance with applicable law; and
- to comply with legal and regulatory requirements, defend legal claims, and assist with legal processes such as investigations and regulatory requests, litigation, and arbitration; and
- to facilitate and implement any reorganization, financing transaction, merger, sale, joint venture, partnership, assignment, transfer, or other disposition of all or any portion of our business, assets or stock (including in connection with any bankruptcy or similar proceedings).
4. What Rights Are Available?
If you are a California resident and this CCPA Notice applies to you, you may request that we:
- Disclose to you the following information covering the 12 months preceding your request:
- The categories of personal information we collected about you and the categories of sources from which we collected such personal information;
- The business or commercial purpose for collecting, sharing or selling personal information about you;
- The categories of personal information about you that we shared, sold or disclosed, and the categories of third parties with whom we shared or to whom we sold or otherwise disclosed such personal information.
- Delete certain personal information we collected from you. In the event that you choose to exercise this right, please note that we may nevertheless retain your personal information as permitted under applicable law, including but not limited to comply with our legal and regulatory obligations and to detect security incidents or other fraudulent or illegal activity.
- Correct inaccuracies in the personal information we collected from you.
- Provide you with a copy of your personal information, in a portable, readily usable format, if requested.
- Opt you out of the "sharing" of your personal information for cross-context behavioral advertising.
- Opt you out of the “sale” of your personal information (as defined by California law).
Under California law, you are entitled to exercise your rights without experiencing any discriminatory treatment.
To make the requests listed in 1-4 above (right to access/disclose, delete, correct, receive a copy), please contact us using either of the methods below:
(1) Call 866-244-4786; or
(2) Submit a request via the web links below:
a. Policy/Contract/Account Owners, Claimants, Insurance Applicants, Beneficiaries, etc. at AIG CCPA Customer Link
b. Agents, Brokers, Registered Representatives, etc. at AIG CCPA Agent Link
Either method will include instructions about how to submit a verifiable request, which will require that you or your authorized representative provide certain identifying information. For policy/contract owners, we request that you provide as much of the following information as possible so that we can locate you in our records:
- Relationship to AIG – policy/contract/account owner, claimant, insurance applicant, beneficiary;
- Request type – receive details on personal information, delete personal information, obtain copies of personal information;
- First and last name;
- Date of birth;
- Email address;
- Address, including state;
- Telephone number;
- Policy/Contract/Claim/Certificate/Quote number; and
- Product name.
We will also ask you to certify under penalty of perjury by typing your name in the electronic form that you are the individual or the authorized representative of the individual whose information is the subject of the request. We may follow up with you for more information if necessary. If we do not receive this information, we will close your request due to our inability to verify your identity.
Authorized representatives will also be required to provide proof of their authority to act on your behalf by uploading relevant documents to the online form, such as a court order or a written power of attorney. If an authorized representative submits a request on your behalf, we will contact you to confirm their representation. If we are unable to verify your identity, or confirm that you have authorized the request, we may not be able to respond to your request in full.
To make the requests listed in 5-6 above (right to opt out of “sale” of your personal information, right to opt out of “sharing” of your personal information for purposes of cross-context behavioral advertising), please submit your request using either of the methods below:
(1) Submit a request by visiting the “Do Not Sell or Share My Personal Information” link.
(2) Submit a request by sending an email at Privacy@aig.com.
5. De-Identified Information
Where we maintain or use de-identified data, we will continue to maintain and use the de-identified data only in a de-identified fashion and will not attempt to re-identify the data.
6. Changes to this CCPA Notice
We may change or update this CCPA Notice from time to time. When we do, we will post the revised CCPA Notice on this page with a new “Last Updated” date.