Last Updated: August 2024
This U.S. Privacy Policy and Notice ("Notice") covers the services offered in the U.S. by Morgan Stanley, including, but not limited to, Morgan Stanley & Co, LLC, Morgan Stanley Smith Barney, LLC, Morgan Stanley Bank, N.A., Morgan Stanley Private Bank, National Association, E*TRADE Futures LLC, and Morgan Stanley Investment Management, Inc. Together, these entities are referred to as “Morgan Stanley,” "our affiliates," "we," "us," and "our" in this Notice.
We are committed to maintaining the privacy and confidentiality of your personal information. Morgan Stanley has a global framework to comply with applicable data protection and privacy laws, which includes policies and procedures that prescribe how Morgan Stanley personnel must process your personal data.
This Notice explains what personal information we collect about you, how we use, disclose and share that information, and the rights you have in connection with that information. Certain rights, requirements, and disclosures in this Notice may be subject to exemption or otherwise may not apply to you based, for example, on applicable law or regulations. This information is required by law and is not a promotion of our products and services.
Personal information that we collect from or about you when you apply for or obtain a Morgan Stanley financial product or service for personal, family or household purposes is also governed by a separate privacy notice. Except as noted below, if you are a current or former applicant or customer of Morgan Stanley, one or more the following privacy notices may be applicable to you depending on the product or service you obtained or sought to obtain from Morgan Stanley. Please refer to these notices for additional information about our privacy practices applicable to your product or service:
- Morgan Stanley Wealth Management (including Shareworks)
- Morgan Stanley Financial Wellness Participants
- Morgan Stanley Institutional Securities
- Morgan Stanley Investment Management
- Eaton Vance
- Calvert Research and Management
- Parametric
- Atlanta Capital
Personal information that we collect about you when you apply for a job at Morgan Stanley or when you act as an employee or contractor at Morgan Stanley is governed by a separate notice, which will be provided to you at or before the time your personal information is collected.
Before providing Morgan Stanley with access to, or permitting any access to, or permitting the processing of, any personal information regarding an individual other than yourself, in connection with services provided, you should ensure that you have the requisite legal authority under all applicable privacy laws to provide such personal information.
1. Information We Collect
As described in this Notice, we may collect personal information from or about you in order to provide, enhance, market, and offer our products and services, including the products and services of our Morgan Stanley affiliates (together, “Services”) to you and to our institutional clients. “Services” include, among other things, maintaining or servicing accounts, providing customer service, processing or fulfilling trades and other transactions, verifying customer information, processing payments, providing financing, determining eligibility for Services, recordkeeping, and related activities.
This section describes the categories of personal information we may collect, including personal information we may have collected in the past twelve months. The type of personal information we collect may vary depending on whether you deal with us as an individual or in connection with one of our corporate or institutional clients, your use of particular services, as well as the jurisdiction where you reside. For purposes of this Notice, personal information generally includes information that may be used to identify you. We only collect personal information in accordance with applicable law.
You are not required to supply any of the personal information that we request. However, failure to supply any of the personal information that we request may result in our being unable to open or maintain your account, provide services to you or your company, discuss any other opportunities with you or deal with other matters.
Categories of Personal Information We May Collect |
Examples of Personal Information We May Collect |
Identifiers |
Name, alias, home and work addresses, home and work phone numbers, mobile phone number, social security number, driver’s license number, passport number, tax identification number, other government-issued identification numbers, alien registration number, place and date of birth, personal and work email address, username and password, social media name, signature, customer identification number, IP address, electronic device (“Device”) identifier, device type, browser type, platform type |
Financial information |
Financial account number, credit card number, debit card number, account balance, trading activity, transactions, equity compensation, loan number, loan amount, 529 plan account number, account history, income, debt, assets, revenue, credit history, credit score, investment experience, risk tolerance, and information about your personal investment goals or objectives |
Account Authentication Information |
CVV, mother’s maiden name, PIN, security question and answer |
Protected classifications under California or federal law (“Protected Class Information”) |
Age, sex, gender, national origin, citizenship, race, ethnicity, marital status, and disability status |
Commercial information |
Records of personal property, and order and purchase history for non-financial goods and services |
Biometric information |
Voiceprint, fingerprint, face image, and palm scan |
Internet or similar network activity |
Browsing history, search history, clickstream data, session information, navigation paths, and other information about how you interact with our websites and mobile applications |
Geolocation data |
Physical location or movements |
Sensory data |
Audio recordings, video recordings, and photographs |
Professional or employment-related information |
Employment information (including employer name), employment history, professional licenses or registrations, and employment identification number, salary or compensation, role, officer status |
Education information |
Academic record, degrees, and schooling |
Inferences from other personal information
|
Preferences, behaviors, characteristics (including, for example, age gender, race, and marital status), number of persons in household, and similar information |
Sensitive Personal Information (note this is a subset of Personal Information)
|
|
In addition, we may compile aggregate, anonymous, or de-identified data from various sources, including, but not limited to, accounts and transactions. This data, which we may use for our business purposes consistent with applicable law, does not identify an individual and is not personal information.
2. Sources of Information and Purposes of Collection and Disclosure
This section describes the sources we may collect personal information from, and why we may collect and, if applicable, disclose personal information. We only use sensitive personal information for purposes not subject to use limitation rights under applicable law.
Sources of Personal Information |
Categories of Personal Information We May Collect |
Purposes of Collecting and Disclosing Personal Information |
Applications and Forms We may collect personal information from you or your authorized representatives during the application or account creation process, or through other forms. |
|
|
Communications and Interactions with Us We may collect personal information from you or your authorized representative when you communicate with us, including, but not limited to, when you contact customer support, submit inquiries, request information from us, provide feedback, or participate in a promotion, survey or conference. |
|
|
Transaction Activity We may collect personal information from you and from records we create about you when you make transactions with or through us. |
|
|
Our Websites and Mobile Applications We may collect personal information from your Device when you visit or interact with our websites or mobile applications. |
|
|
Social Media and Online Forums We may collect personal information from third-party social media platforms and sites, when you engage with our social media pages, online communities and forums, and when you mention us on your own or other social media pages, online communities or forums. Please note that online forums may be publicly accessible and other users may view information you post in the forums. We encourage you to exercise care in deciding what information and content you wish to disclose on the areas of the website that are accessible to the general public. |
|
|
Our Physical Sites We may collect personal information both directly and indirectly from you when you visit our branches, offices, and other physical locations (“Sites”). |
|
|
Stock Plan and Employee Benefit Services We may collect personal information from your employer if your employer uses our technology and Services to administer its stock plan or other employee benefits or perks. |
|
|
Advisor Services We may collect personal information from your registered investment advisor (“RIA”) if your RIA uses our technology and Services to administer and manage your assets. |
|
|
Affiliates We may collect personal information from our affiliates, including, for purposes of this section, our Morgan Stanley affiliates. |
|
|
Service Providers, Data Brokers, and Business Partners We may collect personal information from service providers and business partners. |
|
|
Government Entities We may collect personal information from government agencies, regulators, securities, futures and commodity exchanges, and self-regulatory bodies (“Government Entities”). |
|
|
Consumer Reporting Agencies We may collect personal information from consumer reporting agencies. |
|
|
3. Information We May Disclose and to Whom We May Disclose It
This section describes the categories of personal information we may disclose to certain entities, including, but not limited to, third parties that perform services for us and affiliates. This includes personal information we have disclosed in the past twelve months. We may disclose your personal information for the purposes described in Section 2, (i) if you have provided your consent for disclosure, or (ii) as otherwise permitted or required by law.
Categories of Entities to Whom We May Disclose Personal Information |
Categories of Personal Information We May Disclose |
Operational Entities We may disclose your personal information to entities that help us perform the Services, including, for example, companies that provide administrative, telecommunications, system, software, trade execution, payment, and securities clearing services, and that prepare and send account statements and transaction confirmations and other services in connection with the operation of our business. |
|
Security Entities We may disclose personal information to entities that detect, protect against, and respond to security incidents or other malicious, deceptive, illegal or fraudulent activity or actual or potential threats to the safety or well-being of any person. |
|
Marketing and Advertising Firms We may disclose personal information to entities that perform marketing, advertising or market research on our behalf or help us determine the effectiveness of our marketing. |
|
Data Analytics Firms We may disclose personal information to entities that perform data analytics to help us improve our Services and develop new offerings, among other things. |
|
Government, Regulatory and Self-Regulatory Entities We may disclose personal information to Government, Regulatory and Self-Regulatory Entities and law enforcement officials. In certain cases, laws and regulations may require us to disclose personal information with these entities. |
|
Consumer Reporting Agencies We may disclose personal information to consumer reporting agencies. |
|
Professional Services Firms We may disclose personal information to professional services firms that help us comply with our legal and regulatory obligations and establish, enforce, and otherwise exercise our rights and defend against claims, including, for example, auditors, law firms, and consultants. |
|
Institutional Clients We may disclose personal information to our institutional clients, including RIAs and corporate entities that use our technology to administer their stock or other employee benefit plan(s). |
|
Business Partners We may disclose personal information with business partners. |
|
Affiliates We may disclose your personal information to our affiliates, including, for purposes of this section, our Morgan Stanley affiliates (unless you opt out of eligible sharing). |
|
Merger and Acquisition Activity We may disclose your personal information to third parties in connection with the proposed or actual financing, insuring, sale, securitization, assignment, or other disposal of all or part of our business or assets (including accounts) for the purposes of evaluating and performing the proposed transaction. |
|
4. Information We May Disclose for Cross-Context Behavioral Advertising Purposes
This section describes the categories of personal information we may disclose for “cross-context behavioral advertising”— i.e. delivering targeted advertising to consumers based on personal information we may obtain from their activity across businesses, distinctly-branded websites, applications, or services, other than those with which they intentionally interact. We do not and have not sold personal information for monetary consideration; however, we may share personal information with cookie providers for targeted online advertising.
Categories of Entities to Whom We May Disclose Personal Information |
Categories of Personal Information We May Disclose |
Marketing and Advertising Firms We may disclose personal information to entities that perform marketing, advertising or market research on our behalf or help us determine the effectiveness of our marketing. |
|
5. Notice to California Residents
This section describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CPRA”) and how to exercise those rights.
5.1 Description of Your Rights
Subject to certain exceptions and limitations, you have the following rights with respect to covered personal information.
- Right to request access to personal information. You have the right to request the following information from us.
- Specific pieces of personal information we have about you;
- Categories of personal information we have collected about you;
- Categories of sources from which the personal information is collected;
- Categories of personal information sold, shared, or disclosed, if any;
- Categories of third parties with whom the personal information was sold, shared, or disclosed; and
- The purpose(s) for collecting, sharing, or selling the personal information.
- Right to delete personal information. You have the right to request that we delete the personal information we have collected about you.
- Right to correct inaccurate personal information. You have the right to request that we correct inaccurate personal information that we maintain about you.
- Right to opt-out of the sale/sharing of personal information. You have the right to request to be opted out from the sale/sharing of your personal information; however, as set forth in Section 4, we do not and have not sold your personal information for monetary consideration; however, we may share personal information with cookie providers for targeted online advertising. You can opt-out of sale/sharing of your personal information on morganstanley.com websites that have “Your Privacy Choices” in the footer.
- Right not to be discriminated against for exercising the rights identified above. You have the right not to be denied goods or services, charged different prices or rates for goods or services, or receive a differing level of quality of goods or services as a result of exercising the above rights.
5.2 Covered Personal Information
The rights described in Section 5.1 do not apply to certain categories of personal information. The personal information excluded from coverage under the CPRA includes, among other things:
- Personal information we collect from or about you when you apply for or obtain a product or service for personal, family or household purposes; and
- Personal information sold or bought from a consumer reporting agency for use in a consumer report in compliance with applicable law.
We will apply verifiable consumer requests to covered personal information.
5.3 How to Submit a Request
You or your authorized agent may submit a California privacy rights request using one of the following methods:
Morgan Stanley Wealth Management, Morgan Stanley Bank, N.A and Morgan Stanley Private Bank, National Association (including Residential Mortgage)
- Telephone: + 1 (866) 227-2256
- Web Form: Wealth Management Privacy Center
Shareworks by Morgan Stanley
- Telephone: + 1 (866) 722-7310
- Web Form: Wealth Management Privacy Center
Morgan Stanley Private Share Lending
Morgan Stanley Institutional Securities Group, Morgan Stanley Investment Management, Eaton Vance, Parametric, Atlanta Capital, and Calvert
- Telephone: +1 (844) 846 9408
- Web Form: www.morganstanleydsr.ethicspoint.com
E*TRADE
- Telephone: +1 (800) ETRADE-1 (800-387-2331)
- Web Form: https://us.etrade.com/etx/user/dsar
In order to provide a response, we may ask that you provide clarifying or identifying information to verify your request. We will respond to authorized requests within the timeframe required by law. The above rights are subject to our ability to reasonably verify your identity and authority to make these requests.
You may designate an authorized agent to submit a request on your behalf by providing that agent with your written permission. If an agent makes a request on your behalf, we may still ask that you verify your identity directly with us before we can honor the request.
Agents who make requests on behalf of individuals will be required to verify their authority to make the request by submitting written authorization from the individual.
Your California privacy rights are subject to various exclusions and exceptions under the law. Under certain circumstances, we may be unable to implement your request, pursuant to applicable law. We will advise you of any reason for denying or restricting a request to the extent permitted by law.
We will not provide social security numbers, driver’s license numbers or government issued identification numbers, financial account numbers, health insurance or medical identification numbers, account passwords or security questions and answers, or other specific pieces of personal information if the disclosure presents an unreasonable risk to the security of personal information, customer accounts or our systems and network security.
6. Use of Emerging Technologies such as Artificial Intelligence and Machine Learning
Morgan Stanley may use technologies such as artificial intelligence and machine learning when processing your personal information. We will provide you with notification where required under applicable privacy laws if we use these technologies.
7. Monitoring We Conduct
To the extent permitted by applicable law, we, our Associated Firms or any other persons on our or their behalf access, review, disclose, intercept, monitor and/or record (“Monitor”) (i) verbal and electronic messaging and communications (e.g., telephone, facsimile, sms, instant message, email, and video conferencing and any other electronic or recordable communications) with you and/or your agent (“Communications”); (ii) your use of technology owned by or made accessible by us, our Associated Firms or any other persons on our or their behalf, including but not limited to systems that facilitate Communications with you and/or your agent, information processing, transmission, storage and access, as well as remote access; and (iii) your use of and access to Firm premises (collectively “Systems”).
We will only Monitor Communications and Systems to the extent permissible under applicable law from time to time for purposes such as:
- Provide the Services;
- Enhance the Services;
- Market, advertise, and promote the Services;
- Maintain system and process functionality;
- Protect against unauthorized access, security incidents, fraud, and other malicious or illegal activity; and
- Comply with legal and regulatory obligations, and to establish, enforce, and otherwise exercise our rights and defend against claims.
8. Use of Cookies and Similar Technologies
We, our affiliates and/or other persons acting on our or their behalf use cookies and similar technology, such as web beacons (also known as clear GIFs or pixel tags), or similar technologies as they may develop over time. We use cookies and similar technologies to collect, use, and share information when you visit our online services or interact with us online, e.g., via email or other electronic means. To view our and our affiliates’ Global Cookie Policy, click here.
9. Information on Individuals Under 18 Years
Our online services are not directed to or intended for individuals under 18 years of age. We do not knowingly collect information from individuals under the age of 18 years without parental consent. If we become aware that an individual under 18 years has provided us with personal information without parental consent, we will take steps to remove the data as permitted by law.
We do not knowingly sell or share information of individuals under the age of 16 years.
10. Location of Data Storage and Processing
The personal information we collect from you will be stored in the United States and may be stored in other countries that may have different privacy laws and standards than those in your country of residence. Your personal information may be transferred to or processed in the United States by us or by a third-party service provider working for us. If you are located outside of the United States, the transfer of personal information is necessary to provide you with the requested information, products, and services and/or to perform any requested transaction. When we transfer or disclose your personal information to other countries, we will protect that information as described in this Privacy Notice. By submitting personal information via our website or other means, you agree to such storage, transfers, and processing.
11. Data Security
We maintain reasonable physical, administrative, and technical safeguards to protect your personal information. Our employees and third-party service providers have access to your personal information only on a "need to know" basis. We have internal policies governing the proper handling of consumer information by employees and requiring third parties that provide support or marketing services on our behalf to adhere to appropriate security standards with respect to such information.
12. Retention of Personal Information
We retain personal information in accordance with our information management policies, which establishes general standards and procedures regarding the retention, handling, and disposition of our records, including personal information. Personal information is retained as long as necessary to meet legal and regulatory requirements. Retention may be extended if we are required to preserve personal information in connection with litigation, investigations, and proceedings.
13. Links to Other Sites
Our websites or mobile applications may contain links or otherwise provide access to another website, mobile application, or Internet location (collectively “Third-Party Sites”). The inclusion of a link on our websites or mobile applications does not imply endorsement of the linked website or service by us. We have no control over and are not responsible for Third-Party Sites, their content or any goods or services available through the Third-Party Sites. This Notice does not apply to Third-Party Sites. We encourage you to read the privacy policies of any Third-Party Site with which you choose to interact.
14. Notice to International Residents
Our online services are United States-based and are controlled, operated and administered by Morgan Stanley from its offices within the United States of America, and are made available to you on an unsolicited basis, without any marketing or promotion regarding these online services to you from Morgan Stanley or its personnel. This Notice is provided in accordance with and subject to applicable U.S. law. If you decide to continue to access our online services from your location outside the United States, you hereby agree that your use of those services is subject to this Notice and your personal information will be transferred or processed in the United States.
The disclosures referenced in Section 3 may involve transferring personal information to countries or territories where the laws may provide a different level of data protection. Without limiting the foregoing, your personal information will be disclosed by us to our associated firms, affiliates and vendors that conduct operational, technology and customer service functions in various jurisdictions, potentially including, but not limited to, Canada, Hong Kong, Hungary, India, Japan, Singapore, United Kingdom, and other countries where we and our associated firms operate (https://www.morganstanley.com/about-us/global-offices). To the extent required by applicable data protection and privacy laws, when your personal information is transferred to countries or territories that are not recognized as offering an adequate level of data protection, we put in place appropriate data transfer mechanisms as required and/or provided by such data protection and privacy laws to ensure your personal information is protected. You can obtain a copy of the relevant data transfer mechanism we have put in place by contacting our Data Protection Office at dataprotectionoffice@morganstanley.com.
To the extent provided by applicable law and subject to exemptions thereunder, you have the right to request access to and rectification or erasure of personal information; to obtain restriction of the processing of personal information; to object to the processing of personal information (including direct marketing); and to data portability.
If we have collected personal information with your consent, please note that you have the right to withdraw this consent at any time, subject to applicable law and exemptions thereunder.
If you wish to exercise any of your rights, submit a request as described below:
Morgan Stanley Wealth Management
- Telephone: + 1 (866) 227-2256
- Web Form: Wealth Management Privacy Center
E*TRADE
- Telephone: +1 (800) ETRADE-1 (800-387-2331)
If you consider that we have processed personal information in violation of applicable law, please contact our Data Protection Office at dataprotectionoffice@morganstanley.com, you may also lodge a complaint with a competent data protection authority.
15. Updates to this Notice
We may update this Notice from time to time. We encourage you to periodically review this Notice to learn about updates to our privacy practices.
16. Contact Us
For more information about our privacy practices, or if you have questions or concerns, please visit the Contact Us page on our website.