U.S. State Privacy Notice

Effective Date: June 28, 2024

This U.S. State Privacy Notice applies to “Consumers” as defined under state privacy laws, including those in California, Colorado, Connecticut, Florida, Montana, Oregon, Texas, Utah, and Virginia (collectively, the “U.S. State Privacy Laws“). This U.S. State Privacy Notice is a supplement to our other privacy policies or notices for the U.S. News Services, including our Privacy Policy. In the event of a conflict between any other U.S. News policy, statement, or notice and this U.S. State Privacy Notice, this U.S. State Privacy Notice will prevail as to Consumers and their rights under the applicable state privacy law. Capitalized terms used but not defined herein will have the meanings given to them in the Privacy Policy.

This U.S. State Privacy Notice is designed to provide you with notice of our data practices on the U.S. News Services and anywhere this U.S. State Privacy Notice is posted over the prior 12 months (from the Effective Date listed at the top of this U.S. State Privacy Notice), as required under some U.S. State Privacy Laws. Additionally, this U.S. State Privacy Notice also applies to our current data practices such that it is also meant to provide you with “notice at collection,” which is notice of personal information we collect, and the purposes for which we process personal information, among other things as required by the U.S. State Privacy Laws. For any new or substantially different processing activities that are not described in this U.S. State Privacy Notice, we will notify you as legally required, such as at the point of collection. We reserve the right to amend this U.S. State Privacy Notice at our discretion and at any time. When we make changes to this U.S. State Privacy Notice, we will update the Effective Date (which will be the date that this U.S. State Privacy Notice was last updated).

Section A of this U.S. State Privacy Notice covers our collection, use, and disclosure of Consumers’ personal information or personal data (referred to herein as “personal information” or “PI”) as defined under the U.S. State Privacy Laws. Section B of this U.S. State Privacy Notice describes your rights under U.S. State Privacy Laws and explains how to exercise those rights. Section C and Section D describe your rights under other state laws (which are different from the rights discussed in Sections A and B). Section E is our Nevada Consumer Health Data Privacy Policy, Section F is our Washington Consumer Health Data Privacy Policy, and Section G provides information on how to contact us in relation to our privacy practices.

This U.S. State Privacy Notice does not apply to data that is collected in a human resources (HR) context. For example, if you are a California resident and an employee, former employee, or job applicant of U.S. News or one of its affiliated or related entities, or if we have collected data from or about you otherwise in a HR context, please see our California HR Data Privacy Policy.

Notably, this U.S. State Privacy Notice does not apply to data that is not treated as PI under U.S. State Privacy Laws or to the extent the data is subject to an exemption under the applicable laws. This U.S. State Privacy Notice also does not apply to information collected by third-party content, websites, applications, platform, code (e.g., plug-ins, application programming interfaces, and software development kits), and certain cookies and other tracking technologies (“Third-Party Services”).

A. PI COLLECTION, USE, AND DISCLOSURES

Generally, we collect, use, and disclose your PI in order to provide you services and as otherwise related to the operation of our business, which include both business purposes and commercial purposes described in our Privacy Policy and listed below (“Processing Purposes”). This may include disclosing or otherwise making PI available to our vendors that perform services for us (“Vendors”), including “Service Providers” and “Processors” defined under U.S. State Privacy Laws. Some of the Processing Purposes, as we discuss below, implicate “Sale,” “Sharing”, and or “Targeted Advertising.” For more details on the meaning of Sale, Sharing, and Targeted Advertising, and how to opt-out of them, please visit the Do Not Sell/Share/Target section below. Please note that the Processing Purposes as shown in the table are categorical descriptions, to aid in readability and clarity.

Processing Purposes

Generally, we collect, use, disclose or otherwise process your personal information in connection with the operation of our business, including for the following Processing Purposes:

  • Providing our products and services – to provide you with information, products and services, to perform activities that you have requested or information you agreed to receive or to provide you with special offers or materials on behalf of us, our Affiliates or our Third-Party Business Partners (defined below) that may be of interest to you.
  • Facilitating your relationship with our Affiliates and Third-Party Business Partners – to provide value-add and other services provided by our Affiliates and third-party partners, we may disclose your PI to our Affiliates and to certain third parties so that they can provide you with services you have requested or that you may be otherwise interested in (“Third-Party Business Partners”). These Third-Party Business Partners may include without limitation retail merchants, automobile dealers, financial institutions, public and private educational institutions, and companies in the consumer service industries.
  • Customizing your experience, offers, and content – to enhance your experience on our site and the products and services we offer, we may deliver to you curated content on our sites including marketing for our own products or service offerings or that of our Affiliates and/or Third-Party Business Partners.
  • Registering and administering accounts – to process your registration with the U.S. News Services, verify your information is active and valid, and to manage your account.
  • Customer service and communications – to respond to questions, comments, or requests that you have for us or other customer service purposes; to contact you with regard to your use of the U.S. News Services and, at our discretion, changes to the U.S. News Services and/or their policies; and to verify eligibility for certain services offered by us or our Third-Party Business Partners.
  • Research, development, and analytics – to better understand how users access and use the U.S. News Services, both on an aggregated and individualized basis, in order to improve the U.S. News Services and respond to user desires and preferences, and for other research and analytical purposes.
  • Ad measurement, attribution, and other ad administration – to assist us in determining relevant advertising, the success of our advertising campaigns and where to place our ads, including ads placed on other websites. These activities may be carried out by us, our vendors, and/or our Third-Party Digital Businesses.
  • Market research and customer satisfaction – to administer surveys and questionnaires, such as for market research or customer satisfaction purposes.
  • Targeting advertisements – to provide you or your device with customized advertisements based on your interests.
  • Safety, security, and compliance with legal obligations – for prevention, detection, investigation, and mitigation of illegal activities, fraud, injury to others or violation of our Terms and Conditions or our Privacy Policies.
  • For purposes disclosed at the time you provide your personal information.
  • For purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law.

The table below describes the categories of PI we collect as well as examples of types of data that fit within such categories, in the left column. The middle column lists Processing Purposes applicable to each category of PI. The right column states the categories of recipients that receive those specific categories of PI and Sensitive PI as part of disclosures for business purposes, as well as disclosures that may be considered a Sale or Sharing under certain U.S. State Privacy Laws.

Category of PI Processing Purposes Categories of Recipients
Identifiers and contact information (such as name, phone number, physical address, email address, mobile identification number, IP address, and cookie ID) Providing our products and servicesFacilitating your relationship with our Third-Party Business PartnersCustomizing your experience, offers, and contentRegistering and administering accountsCustomer service and communicationsResearch, development, and analyticsAd measurement, attribution, and other ad administrationMarket research and customer satisfactionTargeting advertisementsSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Software, communications, storage and other business Vendors (“Business Vendors”)Marketing VendorsAffiliates and related entitiesSale/Sharing Recipients:Third-Party Business PartnersThird-Party Digital Businesses
Personal Records (such as name, signature, physical address, telephone number, education, employment, employment history, bank account number, credit card number, and debit card number) Providing our products and servicesFacilitating your relationship with our Third-Party Business PartnersCustomizing your experience, offers, and contentRegistering and administering accountsCustomer service and communicationsResearch, development, and analyticsMarket research and customer satisfactionSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Business VendorsPayment processing VendorsMarketing VendorsAffiliates and related entitiesSale/Sharing Recipients:Third-Party Business Partners
Personal Characteristics or Traits (such as age and gender) Providing our products and servicesFacilitating your relationship with our Third-Party Business PartnersCustomizing your experience, offers, and contentRegistering and administering accountsCustomer service and communicationsResearch, development, and analyticsAd measurement, attribution, and other ad administrationMarket research and customer satisfactionTargeting advertisementsSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Business VendorsMarketing VendorsAffiliates and related entitiesSale/Sharing Recipients:Third-Party Business PartnersThird-Party Digital Businesses
Transaction / Commercial Information (such as U.S. News’ products or services used, purchased, or considered; Third-party Business Partners’/Digital Businesses’ products or services considered; and other purchasing or consuming histories or tendencies provided by Business and Marketing Vendors) Providing our products and servicesFacilitating your relationship with our Third-Party Business PartnersCustomizing your experience, offers, and contentRegistering and administering accountsCustomer service and communicationsResearch, development, and analyticsAd measurement, attribution, and other ad administrationMarket research and customer satisfactionTargeting advertisementsSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Business VendorsPayment processing VendorsMarketing VendorsAffiliates and related entitiesSale/Sharing Recipients:Third-Party Business PartnersThird-Party Digital Businesses
Services Usage Information (such as search, browsing history, and other interactions with the U.S. News Services) Providing our products and servicesFacilitating your relationship with our Third-Party Business PartnersCustomizing your experience, offers, and contentRegistering and administering accountsCustomer service and communicationsResearch, development, and analyticsAd measurement, attribution, and other ad administrationMarket research and customer satisfactionTargeting advertisementsSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Business VendorsMarketing VendorsAffiliates and related entitiesSale/Sharing Recipients:Third-Party Digital Businesses
Location Data (such as where you enable location-based features on your Device, or we may infer your rough location (such as zip code)) Providing our products and servicesFacilitating your relationship with our Third-Party Business PartnersCustomizing your experience, offers, and contentRegistering and administering accountsCustomer service and communicationsResearch, development, and analyticsAd measurement, attribution, and other ad administrationMarket research and customer satisfactionTargeting advertisementsSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Business VendorsMarketing VendorsAffiliates and related entitiesSale/Sharing Recipients:Third-Party Business PartnersThird-Party Digital Businesses
Professional or Employment Information (such as your title, affiliated organization, professional expertise and experience, and education related information) Providing our products and servicesFacilitating your relationship with our Third-Party Business PartnersCustomizing your experience, offers, and contentRegistering and administering accountsCustomer service and communicationsResearch, development, and analyticsAd measurement, attribution, and other ad administrationMarket research and customer satisfactionTargeting advertisementsSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Business VendorsMarketing VendorsAffiliates and related entitiesSale/Sharing Recipients:Third-Party Business PartnersThird-Party Digital Businesses
Inferences from PI Collected (we may infer your interest in certain content based on the pages of the U.S. News Services you visit) Providing our products and servicesFacilitating your relationship with our Third-Party Business PartnersCustomizing your experience, offers, and contentRegistering and administering accountsCustomer service and communicationsResearch, development, and analyticsAd measurement, attribution, and other ad administrationMarket research and customer satisfactionTargeting advertisementsSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Business VendorsMarketing VendorsAffiliates and related entitiesSale/Sharing Recipients:Third-Party Business PartnersThird-Party Digital Businesses
 Sensitive PI 
Account information and password (we may store your account log-in in combination with a password in our systems) Providing our products and servicesRegistering and administering accountsCustomer service and communicationsSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Business VendorsAffiliates and related entitiesSale/Sharing Recipients: we do not sell or share this category of PI
Sensitive Personal Characteristics (such as race, ethnicity, and religious affiliation that you voluntarily provide) Providing our products and servicesFacilitating your relationship with our Third-Party Business PartnersResearch, development, and analyticsAd measurement, attribution, and other ad administrationTargeting advertisementsSafety, security, and compliance with legal obligationsFor purposes disclosed at the time you provide your personal informationFor purposes that are compatible with the purpose of collecting your personal information and that are not prohibited by law Disclosures for business purposes:Business VendorsMarketing VendorsAffiliates and related entitiesSale/Sharing Recipients:Third-Party Business PartnersThird-Party Digital Businesses

We also may disclose each category of PI and Sensitive PI in the table to the following categories of recipients in a manner that does not constitute Sale or Sharing:

  • To other parties at your direction or through your intentional action
  • To the government or private parties to comply with law or legal process
  • In connection with a corporate transaction, such as a divestiture, merger, consolidation, or asset sale, in which case we will transfer such information to the buyer or successor entity in any such corporate transaction
  • In addition, our Vendors and the other recipients listed in the above table may, subject to contractual restrictions imposed by us and/or legal obligations, also use and disclose your PI for business purposes. For example, our Vendors and the other categories of recipients listed in the table below may engage subcontractors to enable them to perform services for us or process for our business purposes.

Certain of the U.S. State Privacy Laws require us to provide the following notice. More information about the purposes of processing which may implicate “Sale” can be found below, and recipients of PI where Sales are implicated are described in the table above.
    NOTICE: We may Sell your Sensitive PI.

Processing Purposes Implicating Sale, Sharing, Targeted Advertising, and Profiling

When you provide us PI for the following Processing Purposes, we may use and disclose certain personal information that you provide for such purposes in a way that may constitute Selling and/or Sharing, as well as Processing of your PI for purposes of Targeted Advertising.

  • Providing our products and services
  • Facilitating your relationship with our Third-Party Business Partners
  • For purposes disclosed at the time you provide your personal information

Processing Purposes that may implicate Selling and/or Processing of your PI for Targeted Advertising include the following:

  • Targeting advertisements
  • Facilitating your relationship with our Third-Party Business Partners
  • Ad measurement, attribution, and other ad administration
  • For purposes disclosed at the time you provide your personal information

Sources of PI

As described in our Privacy Policy, we collect PI directly from you or from your device, Third-Party Digital Businesses, Third-Party Business Partners, Vendors, our affiliates and related entities, other individuals (e.g., your friends, your family (such as your parents) and others that use the U.S. News Services and submit content concerning you or about you) and other third parties.

Data Retention

Because there are so many different types of PI in certain categories, and so many purposes and use cases for different data, we are unable to provide retention ranges based on categories of PI in a way that would be meaningful and transparent to you. Actual retention periods for all PI will depend upon how long we have a legitimate purpose for the retention — consistent with the collection purposes and applicable law. For instance, we may maintain business records for so long as relevant to our business, and may have a legal obligation to hold PI for so long as potentially relevant to prospective or actual litigation or government investigation. We apply the same criteria for determining if we have a legitimate purpose for retaining your PI that you ask us to delete. If you make a deletion request, we will conduct a review of your PI to confirm if legitimate ongoing retention purposes exist, will limit the retention to such purposes for so long as the purpose continues, and will respond to you with information on any retention purposes on which we rely for not deleting your PI. For more information on deletion requests see the Right to Delete section below.

B. CONSUMER RIGHTS REQUESTS

As described in further detail below, subject to meeting the requirements for a Verifiable Consumer Request (defined below), we provide Consumers – which are, for clarity, residents of certain states – the privacy rights described in this section. For residents of states without Consumer privacy rights, we will consider requests but will apply our discretion in how we process such requests. For states that have passed consumer privacy laws but are not yet in effect as of the Effective Date, we will also consider applying state law rights prior to the effective date of such laws but will do so at our discretion.

Making a Request and Scope of Requests

As permitted by U.S. State Privacy Laws, any request you submit to us is subject to an identity verification process (“Verifiable Consumer Request”) as described in the Verifying Your Request section below. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the Consumer about whom we collected PI.

To make a request, other than a Do Not Sell/Share/Target request, please submit your request to us by one of the methods below. For instructions on how to submit a Do Not Sell/Share/Target request, please go to the Do Not Sell/Share/Target section below.

Some information we maintain about Consumers that is technically considered PI may nonetheless not be sufficiently associated with the information that you provide when making your request. For example, if you provide your name and email address when making a request, we may be unable to associate that information with certain data collected on the U.S. News Services such as clickstream data tied only to a pseudonymous browser ID. Where we are unable to associate such information with the information you provide, we are therefore unable to associate such information with you and cannot include such information in response to those requests. If we cannot comply with a request, we will explain the reasons in our response. We will use PI provided in a Verifiable Consumer Request only to verify your identity or authority to make the request and to track and document request responses, unless you also gave it to us for another purpose.

We will make commercially reasonable efforts to identify PI that we collect, process, store, disclose, and otherwise use and to respond to your privacy requests. We will typically not charge a fee to fully respond to your requests; provided, however, that we may charge a reasonable fee, or refuse to act upon a request, if your request is excessive, repetitive, unfounded, or overly burdensome. If we determine that the request warrants a fee, or that we may refuse it, we will give you notice explaining why we made that decision. You will be provided a cost estimate and the opportunity to accept such fees before we will charge you for responding to your request.

Verifying Your Request

When you make a request, we will verify that you are the person you say you are, or, if you are seeking information on behalf of another person, that you are authorized to make the request on their behalf (see our “Authorizing an Agent” section immediately below). In addition, we will compare the information you have provided to us to ensure that we maintain personal information about you in our systems. As an initial matter, we ask that you provide us with, at a minimum, your name and email address. Depending on the nature of the request and whether we have the email address you have provided in our systems, we may request further information from you to verify that you are the Consumer making the request. We will review the information provided as part of your request and may ask you to provide additional information via e-mail or other means to complete the verification process. We will not fulfill your Right to Know (Categories), Right to Know (Specific Pieces), Right to Delete, or Right to Correction request unless you have provided sufficient information for us to reasonably verify you are the Consumer that is the subject of the request. The same verification process does not apply to opt-outs of Sale or Sharing, or limitation of Sensitive PI requests, but we may apply authentication measures if we suspect fraud (such as verifying access to the email provided when making the request).

The verification standards we are required to apply for each type of request vary. We verify your categories requests, certain deletion, and correction requests (e.g., those that are less sensitive in nature) to a reasonable degree of certainty, which may include matching at least two data points provided by you with data points maintained by us, which we have determined to be reliable for the purpose of verifying you. For certain deletion and correction requests (such as those that relate to personal information that is more sensitive in nature) and for specific pieces requests, we apply a verification standard of a reasonably high degree of certainty. This standard includes matching at least three data points provided by you with data points maintained by us, which we have determined to be reliable for the purpose of verifying you, and may include obtaining a signed declaration from you, under penalty of perjury, that you are the individual whose personal information is the subject of the request.

If we cannot verify you in respect of certain requests, such as if you do not provide the requested information, we will still take certain actions as required by certain U.S. State Privacy Laws. For example, if you are a California Consumer:

  • If we cannot verify your deletion request, we will refer you to this U.S. State Privacy Notice for a general description of our data practices.
  • If we cannot verify your specific pieces request, we will treat it as a categories request.

Authorizing an Agent

You may designate an authorized agent to submit a request on your behalf by submitting a request in the manner described above. If you are an authorized agent who would like to make a request, the U.S. State Privacy Laws require that we ensure that a request made by an agent is a Verifiable Consumer Request and allow us to request further information to ensure that the Consumer has authorized the agent to make the request on their behalf. Generally, we will request that an agent provide proof that the Consumer gave the agent signed permission to submit the request, and, as permitted under the U.S. State Privacy Laws, we also may require the Consumer to either verify their own identity or directly confirm with us that they provided the agent permission to submit the request.

Your Consumer Privacy Rights

Appeal Rights

Residents of Colorado, Connecticut, Florida, Montana, Oregon, Texas and Virginia have the right to appeal a decision regarding a privacy request. You can exercise this right by responding to the email we send containing our response to your request, and following the instructions in such email.

Right to Limit Sensitive PI Processing

Certain personal information qualifies as sensitive data or Sensitive PI under the U.S. State Privacy Laws, which we refer to in this U.S. State Privacy Notice as “Sensitive PI”. Residents of certain states must give consent for U.S. News to process their Sensitive PI. If you give such consent, you subsequently have the right to opt-out of certain processing of Sensitive PI if it is used or disclosed beyond certain internal business purposes. Where applicable, we will treat such an opt-out request as a revocation of any consent that you may have provided to your processing of Sensitive PI.

Right to Know/Access

Right to Know – Categories/Confirmation of Processing

If you are a California resident, you have the right to request that we provide you with certain information about our collection, use and disclosure of your PI over the 12-month period prior to the request date, related to categories of PI. You can request that we confirm whether we are processing your personal information, and disclose to you: (1) the categories of PI we collected about you; (2) the categories of sources for the PI; (3) our business or commercial purpose for collecting or selling that PI; (4) a list of the categories of PI disclosed for a business purpose in the prior 12 months and, for each category of PI, the categories of recipients; and (5) a list of the categories of PI sold or shared about you in the prior 12 months and, for each, the categories of recipients.

Right to Know – Specific Pieces

You have the right to request a transportable copy of the specific pieces of PI we collected about you. In some states, such as California, this includes the right to PI collected in the 12-month period preceding your request. Please note that PI is retained by us for various time periods, so there may be certain information that we have collected about you that we do not even retain for 12 months (and thus, it would not be able to be included in our response to you). Based on your state of residence, we may apply a limit on the number of “Right to Know” requests you make over a particular time period, as permitted under U.S. State Privacy Laws.

Right to Delete

You have the right to request that we delete any of your PI that we have collected directly from you, subject to certain exceptions which we will explain if they apply. After we confirm that your deletion request is a Verifiable Consumer Request, subject to permitted retention exceptions, we will carry out one or more of the following: (i) permanently erase your PI on our existing systems with the exception of archived or back-up systems, (ii) deidentify your PI, or (iii) aggregate your PI with other information. In our response to your request to delete, we will tell you the method for deleting your PI. Where legal exceptions will apply to your request for deletion, we will tell you which one(s) and will limit retention to the permitted purpose(s).

Right to Correct

You have the right to request that we correct inaccuracies that you find in your personal information maintained by us. Your request to correct is subject to our verification (discussed above) and the response standards in the applicable U.S. State Privacy Laws.

Oregon Residents: Third Parties

Oregon residents have the right to request a list of third parties (non-Service Providers/Processors) to which we have disclosed personal information.

Do Not Sell/Share/Target

Under the various U.S. State Privacy Laws, Consumers have the right to opt-out of certain processing activities. California and certain other states have opt-outs specific to Targeted Advertising activities – which California’s law refers to as “cross-context behavioral advertising”, and others simply as Targeted Advertising – which involve the use of PI from different businesses or services to target advertisements to you. California provides Consumers the right to opt-out of Sharing, which includes providing or making available PI to third parties for such Targeted Advertising activities, while other states provide Consumers the right to opt-out from processing PI for Targeted Advertising more broadly. There are broad and differing concepts of the Sale of PI under the various U.S. State Privacy Laws, all of which at a minimum require providing or otherwise making available PI to a third party.

Third-Party digital businesses, including social media platforms, analytics companies, data brokers, third-party advertisers, and other tech companies that offer digital advertising services (“Third-Party Digital Businesses”) may associate cookies, web beacons (also known as pixel tags) and other similar technology (“Tracking Technologies”) on the U.S. News Services that collect PI when you use or access the U.S. News Services, or otherwise collect and process PI that we make available about you, including digital activity information. Giving access to PI on the U.S. News Services, or otherwise, to Third-Party Digital Businesses could be deemed a Sale and/or Sharing and could implicate Targeted Advertising under some state laws. Therefore, we will treat such PI collected by Third-Party Digital Businesses (e.g., cookie ID, IP address, and other online IDs and internet or other electronic activity information) as such, and subject to the opt-out requests described above. In some instances, the PI we make available about you is collected directly by such Third-Party Digital Businesses using Tracking Technologies on the U.S. News Services or our advertisements that are served on third-party sites (which we refer to as “cookie PI”). However, certain PI which we make available to Third Party Digital Businesses is information that we have previously collected directly from you or otherwise about you, such as your email address (which we refer to below as “non-cookie PI”). For information regarding other categories of third parties to which we may sell/share your PI, see the table above in the PI COLLECTION, USE, AND DISCLOSURES section above.

When you opt-out pursuant to the instructions below, it will have the effect of opting you out of Sale, Sharing, and Targeted Advertising, as applicable, under all of the various applicable state laws. Instructions for opting out are below. Please note that there are distinct instructions for opting out of cookie PI and non-cookie PI, which we explain further, below.

Opt-out for cookie PI: If you would like to submit a request to opt-out of our processing of your cookie-related PI for Targeted Advertising, or opt-out of the sale/sharing of such PI, you can exercise an opt-out request by visiting our Consent Management Platform and following the instructions. You must exercise your preferences on each of our websites and apps you visit, from each browser you use, and on each device that you use. Since your browser opt-out is designated by a cookie, if you clear or block cookies, your preferences will no longer be effective and you will need to enable them again via our Consent Management Platform.

Your Additional Cookies Choices

Third-Party Digital Businesses may use cookies and other Tracking Technologies to recognize your device and/or to collect and record information about your visits to the U.S. News Services and other websites, so that they can facilitate feature functionality, measure the effectiveness of ads, track page usage and paths followed during visits, and provide interest-based advertisements to you. These companies may provide this data to us. If you would like more information about this practice and to know your choices about certain kinds of online interest-based advertising, please visit National Advertising Initiative Consumer Opt OutDigital Advertising Alliance Your AdChoices , or AdChoices for your mobile device. U.S. News does not provide any assurances that these third-party tools, programs or statements are complete or accurate.

Some of the U.S. State Privacy Laws also require us to state that we do not knowingly Sell or Share the PI of Consumers under 16.

Global Privacy Control or “GPC”

Some of the U.S. State Privacy Laws require businesses to process GPC signals. GPC signals are signals sent by a platform, technology, or mechanism, enabled by individuals on their devices or browsers, that communicate the individual’s choice to opt-out of Sale, Sharing and/or Targeted Advertising, such that the GPC signal effectively automatically communicates such requests. To use GPC, you can download an internet browser or a plugin to use on your current internet browser and follow the settings to enable GPC. To our knowledge, we have configured our websites to receive and honor GPC signals pursuant to the specification and implementation instructions at https://globalprivacycontrol.org. We will apply GPC signals as a Do Not Sell/Share/Target requests as to cookie PI. Notably, when you are visiting our website on a particular device and browser, we will apply the GPC signal and corresponding Do Not Sell/Share/Target as to cookie-PI only to that specific device and browser. You must re-enable GPC if you visit our website on a different device and/or browser.

We are required by certain U.S. State Privacy Laws to state that we do not: (1) charge a fee for use of our websites if you have enabled GPC; (2) change your experience with our websites if you use GPC; or (3) display a notification, pop-up, text, graphic, animation, sound, video, or any interstitial in response to GPC (except that we may from time-to-time display on our website or consent management platform that you have enabled GPC).

Automated Decision-Making and Profiling

We may engage in processing that constitutes automated decision-making or profiling under the CCPA. However, as of the Effective Date, the definitions of these concepts, and any associated opt-out and access rights have not been added to the updated regulations of the CCPA.

We do not believe we carry out profiling in furtherance of decisions that produce legal or similarly significant effects. If we change our practices, we will change this policy and provide you with the right to opt-out of such activities as required by the applicable U.S. State Privacy Laws, subject to any applicable exceptions.

Right to Non-Discrimination; Incentive/Loyalty Programs

You have the right not to receive discriminatory treatment, in a manner prohibited by U.S. State Privacy Laws, for the exercise of your privacy rights.

We collect and use your PI to administer and maintain incentive/loyalty programs that may constitute a “financial incentive,” “price or service difference,” or “bona fide loyalty program” as defined under the U.S. State Privacy Laws. For a description of our current loyalty/incentive programs, including how to opt-in to or withdraw from such programs, and the basis for valuing your PI in connection with program benefits, click here. Please note that participating in our incentive programs is entirely optional, you will have to affirmatively opt-in to the programs to participate. Additionally, any opt out instructions are available in the link above. We may add or change incentive programs by posting a notice on the program descriptions linked to above, so check them regularly.

Ours and Others’ Rights

Notwithstanding anything to the contrary, we may collect, use, and disclose your PI as required or permitted by applicable law and this may override your rights under U.S. State Privacy Laws. In addition, we need not honor any of your requests to the extent that doing so would infringe upon our or any other person or party’s rights or conflict with applicable law.

C. OTHER CALIFORNIA NOTICES

In addition to CCPA rights, certain Californians are entitled to certain other notices, including those described below.

Third Party Marketing and Your California Privacy Rights

California’s “Shine the Light” law permits California residents to request certain information regarding our disclosure of PI to third parties for their own direct marketing purposes. Separate from your CCPA rights described above, you have the following additional rights regarding disclosure of your information to third parties for their own direct marketing purposes. We may from time to time elect to share certain “personal information” (as defined by California’s “Shine the Light” law) about you with third parties for those third parties’ direct marketing purposes. California Civil Code § 1798.83 permits California residents who have supplied personal information, as defined in the statute, to us to, under certain circumstances, request and obtain certain information regarding our disclosure, if any, of personal information to third parties for their direct marketing purposes. If this applies, you may obtain the categories of personal information shared and the names and physical addresses of all third parties that received personal information for their direct marketing purposes during the immediately prior calendar year (e.g., requests made in 2023 will receive information about 2022 sharing activities). To make such a request, please provide sufficient information for us to determine if this applies to you, attest to the fact that you are a California resident and provide a current California physical address. You may make this request by contacting us at privacy@usnews.com. Any such request must include “Shine the Light California Privacy Rights Request” in the first line of the description and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year.

As these rights and your CCPA rights are not the same and exist under different laws, you must exercise your rights under each law separately.

California Minors

Although the U.S. News Services are intended for an audience over the age of 18, any California residents under the age of eighteen (18) who have registered to use the U.S. News Services, and who posted content or information on the U.S. News Service, can request removal by contacting us at binaryedge.usa@gmail.com, detailing where the content or information is posted and attesting that you posted it. We will then make reasonably good faith efforts to remove the post from prospective public view or anonymize it, so the minor cannot be individually identified to the extent required by applicable law. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished or archived content by search engines and others that we do not control.

D. NOTICE FOR NEVADA RESIDENTS

Users of the U.S. News Services, who are Nevada consumers, have the right to submit a verified request that the U.S. News Services not sell such Nevada consumer’s covered information. Such right is further described, and the terms are defined, in Nevada Revised Statutes 603A (the “Nevada Internet Privacy Law”). The U.S. News Services do not currently sell any covered information as defined in the Nevada Internet Privacy Law. Nevada consumers may register an email address to which identity verification instructions will be delivered if the U.S. News Services begin selling covered information, as defined by the Nevada Internet Privacy Law, in the future. Any Nevada consumer who wishes to so register should send his/her email address and a request to register to binaryedge.usa@gmail.com with “Nevada Do Not Sell Request” in the subject line and the message of the email. Should a Nevada consumer’s registered email address subsequently change, such Nevada consumer must contact binaryedge.usa@gmail.com to inform the U.S. News Services of such change (specifying the Nevada consumer’s old and new email addresses), as the U.S. News Services will not search any other records in the event a registered email address is no longer valid.

E. NEVADA CONSUMER HEALTH DATA PRIVACY POLICY

This Section E of this U.S. State Privacy Notice is our Nevada Consumer Health Data Privacy Policy (“NCHD Privacy Policy”) and is effective March 31, 2024 (the “NCHD Privacy Policy Effective Date”). It explains our practices for “Consumer Health Data” as defined and regulated by Nevada’s consumer health data privacy law (SB 370) (the “Nevada Health Data Privacy Law”). Only this Section E applies to our processing of Consumer Health Data of Nevada “Consumers” (as defined in the Nevada Health Data Privacy Law).

Categories of Consumer Health Data Collected, Purpose of Collection and How We Use It

Generally, we collect and share Consumer Health Data of Nevada Consumers for the purpose of providing a product or service requested by such Nevada Consumers that use the U.S. News Services, for safety and security purposes, and for compliance and other legal purposes.

  • Providing our products and services – to provide you with information, products and services, to perform activities that you have requested or information you agreed to receive.
  • Customer service and communications – to respond to questions, comments, or other requests that you have for us or other customer service purposes.
  • Safety, security, and compliance with legal obligations – for prevention, detection, investigation, and mitigation of illegal activities, fraud, injury to others or violation of our Terms and Conditions or our Privacy Policies, and to prepare for and defend legal claims.
  • For purposes for which you provide your consent or authorization.

Depending on the nature of your activity on the U.S. News Services and your requests, we collect the following, which may be considered categories of Consumer Health Data:

  • Data that identifies a consumer seeking health care services, such as if you use features on the U.S. News Services to look for doctors or hospitals, use the U.S. News Services to research over-the-counter medications or products, or consume content or articles that fall into this category.

We share Consumer Health Data in limited circumstances, as follows:

  • Vendors that are classified as “processors” under the Nevada Health Data Privacy Law which process Consumer Health Data to assist us in providing products and services requested by consumers, and for the other purposes described in this NCHD Privacy Policy.
  • Our other agents and contractors who assist us with the processing purposes described in this NCHD Privacy Policy, such as legal representatives who assist us with complaints involving Consumer Health Data
  • Assignees or potential assignees as part of an acquisition, merger, asset sale, or other transaction where another party assumes control over all or part of our business.
  • Other parties with your consent.

We may share all of the categories of Consumer Health Data that we collect, which depends on the circumstances under which we collect it. We do not sell Consumer Health Data.

We may collect Consumer Health Data from the following sources: you, your device, your agents and representatives (for example, legal representatives in relation to a complaint), governmental entities (for example, if you have filed a lawsuit against us, we may obtain information from official filings or that we receive from government bodies), our affiliates, and franchisees, and other third parties that may have your Consumer Health Data in relation to the processing purposes described herein.

We will retain and use your Consumer Health Data for the length of time needed to carry out the purposes outlined in this NCHD Privacy Policy and in accordance with our record retention policies.

Consumer Rights Requests

Subject to applicable law, if you are a Nevada Consumer, you may have the following rights related to your Consumer Health Data:

  • Right to confirm processing of Consumer Health Data and access such data
  • Right to delete
  • Right to withdraw consent (from processing which requires your consent)
  • Right to appeal our refusal to act on a request within a reasonable time after you receive our decision. You may appeal our decision regarding your request by following the instructions in our response to your request.

Pursuant to the requirements of the Nevada Health Data Privacy Law, we will respond to your privacy requests free of charge, up to twice annually. If requests are manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request.

U.S. News reserves the right to amend this NCHD Privacy Policy at our discretion and at any time. When we make changes to this NCHD Privacy Policy, we will update the Effective Date in the first paragraph of this Section E (which will be the date that this NCHD Privacy Policy was last updated) or otherwise provide notice in compliance with applicable law.

F. WASHINGTON CONSUMER HEALTH DATA PRIVACY POLICY

This Section F of this U.S. State Privacy Notice is our Washington Consumer Health Data Privacy Policy (“WCHD Privacy Policy”) and is effective March 31, 2024 (the “ WCHD Privacy Policy Effective Date”). It explains our practices for “Consumer Health Data” as defined and regulated by the Washington My Health My Data Act (RCW 19.373.005 et seq.) (the “MHMDA”). Only this Section F applies to our processing of Consumer Health Data of Washington “Consumers” (as defined in MHMDA).

Categories of Consumer Health Data Collected, Purpose of Collection and How We Use It

Generally, we collect and share Consumer Health Data of Washington Consumers for the purpose of providing a product or service requested by such Washington Consumers that use the U.S. News Services, for safety and security purposes, and for compliance and other legal purposes.

  • Providing our products and services – to provide you with information, products and services, to perform activities that you have requested or information you agreed to receive.
  • Customer service and communications – to respond to questions, comments, or other requests that you have for us or other customer service purposes.
  • Safety, security, and compliance with legal obligations – for prevention, detection, investigation, and mitigation of illegal activities, fraud, injury to others or violation of our Terms and Conditions or our Privacy Policies, and to prepare for and defend legal claims.
  • For purposes for which you provide your consent or authorization

Depending on the nature of your activity on the U.S. News Services and your requests, we collect the following, which may be considered categories of Consumer Health Data:

  • Data that identifies a consumer seeking health care services, such as if you use features on the U.S. News Services to look for doctors or hospitals, use the U.S. News Services to research over-the-counter medications or products, or consume content or articles that fall into this category.

We share Consumer Health Data in limited circumstances, as follows:

  • Vendors that are classified as “processors” under the MHMDA which process Consumer Health Data to assist us in providing products and services requested by consumers, and for the other purposes described in this WCHD Privacy Policy.
  • Our other agents and contractors who assist us with the processing purposes described in this WCHD Privacy Policy, such as legal representatives who assist us with complaints involving Consumer Health Data
  • Assignees or potential assignees as part of an acquisition, merger, asset sale, or other transaction where another party assumes control over all or part of our business.
  • Other parties with your consent.

We may share all of the categories of Consumer Health Data that we collect, which depends on the circumstances under which we collect it. We do not sell Consumer Health Data.

We may collect Consumer Health Data from the following sources: you, your device, your agents and representatives (for example, legal representatives in relation to a complaint), governmental entities (for example, if you have filed a lawsuit against us, we may obtain information from official filings or that we receive from government bodies), our affiliates, and franchisees, and other third parties that may have your Consumer Health Data in relation to the processing purposes described herein.

Consumer Rights Requests

Subject to applicable law, if you are a Washington Consumer, you may have the following rights related to your Consumer Health Data:

  • Right to confirm processing of Consumer Health Data and access such data
  • Right to delete
  • Right to withdraw consent (from processing which requires your consent)
  • Right to appeal our refusal to act on a request within a reasonable time after you receive our decision. You may appeal our decision regarding your request by following the instructions in our response to your request.

Pursuant to the requirements of MHMDA, we will respond to your privacy requests free of charge, up to twice annually. If requests are manifestly unfounded, excessive, or repetitive, we may charge a reasonable fee to cover the administrative costs of complying with the request or decline to act on the request.

U.S. News reserves the right to amend this WCHD Privacy Policy at our discretion and at any time. When we make changes to this WCHD Privacy Policy, we will update the Effective Date in the first paragraph of this Section F (which will be the date that this WCHD Privacy Policy was last updated) or otherwise provide notice in compliance with applicable law.

G. CONTACT US

If you have any questions about the Privacy Policy, the U.S. State Privacy Notice or practices described in it, you may contact us at:

Attention: Legal/Privacy
U.S. News & World Report, L.P.
129 W. 29th Street, 11th Floor
New York, NY 10001
binaryedge.usa@gmail.com