Effective Date: January 1, 2020
Last Reviewed: June 9, 2020
Your privacy is a top priority for PG&E and we make every reasonable effort to protect the information we hold about you. This Privacy Policy addresses information obtained from California consumers (California residents), PG&E customers, website visitors, and mobile application users and is intended to inform you about how PG&E treats personal information that we collect and use about you. This Policy covers Pacific Gas and Electric Company and its parent company, PG&E Corporation. As used herein, "PG&E" refers to Pacific Gas and Electric Company and/or PG&E Corporation.
Except as noted in this Privacy Policy, this Privacy Policy does not apply to employment-related personal information collected from California-based job applicants, employees, directors, officers and contractors.
PG&E provides our deaf, hard of hearing, and visually-impaired customers, customers who have a speech disability and customers who seek support in other languages, with various services. Those customers can access PG&E Privacy Policy by contacting our Assistive Resources or calling our toll-free number at 1-800-743-5000.
In addition to PG&E's general privacy policies, California consumers and PG&E customers who are California residents have specific rights under the California Consumer Privacy Act of 2018.
The rights include:
You may exercise your rights under the California Consumer Privacy Act as described in more detail below. You can also download a pdf copy (PDF, 47 KB) of this information about the California Consumer Privacy Act. Requests may be submitted through PG&E's California Consumer Privacy Act consumer request webpage, or by toll free telephone number 1-800-743-5000. You can also exercise your rights by visiting a PG&E local office. Locate a PG&E office near you.
For information specific to the privacy of Energy Usage Data, please see PG&E's Notice of Accessing, Collecting, Storing, Using and Disclosing Energy Usage Information.
"Personal information" means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or household or PG&E customer. Such information may be subject to confidentiality requirements.
"Service providers" means any entity other than PG&E that processes information on behalf of PG&E and/or to which PG&E discloses a consumer's personal information for a business purpose pursuant to a written contract.
"Third parties" means any person or entity other than PG&E or its employees, which collects, uses or accesses personal information from PG&E for any purpose other than a business purpose on behalf of PG&E.
"You" means any California consumer, PG&E customer, website visitor, or mobile application user.
Personal information that we collect and disclose about PG&E customers and California consumers
If permitted by law, we collect information about you from a variety of sources, including:
For each category of personal information, the category of sources from which that information is collected, if permitted by law, is indicated in the table below:
Source of Personal Information | Categories of Personal Information | |
---|---|---|
Information You Provide |
|
|
Information We Collect by Automated Means Online |
|
|
Information We Collect by Automated or Manual Means Through PG&E Equipment |
|
|
Information We Collect from Other Sources |
|
Examples of information that we collect about you include:
For some applications, such as rate analysis, we link usage information with your personal information.
We may supplement the information described above with information we obtain from other sources, including from both online and offline data providers. Such supplemental information may include contact information, such as your email address, demographic data, or other relevant information.
In particular, within the preceding twelve (12) months, PG&E has collected, through its website or otherwise, and disclosed to service providers and third parties the categories of personal information identified below in order to provide services to our customers, as required by law, or otherwise. The categories of personal information identified below include the categories of personal information about our customers, including California consumers as well as PG&E job applicants, employees, directors, officers and contractors. In addition to PG&E, service providers and third parties to whom personal information has been disclosed on behalf of PG&E include contractors, vendors, service providers, government regulatory agencies, courts, and other third parties with a legal right to the information, as well as marketing, advertising and analytic companies. See Sharing Personal Information with Service Providers and Third Parties. See also Information we obtain from your use of our website or mobile apps and How We Use Information below.
Category | Examples | Information Collected and Disclosed | |
---|---|---|---|
A. Identifiers |
A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers. |
Yes |
|
B. Personal information categories listed in the California Customer Records statute |
A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories. |
Yes |
|
C. Protected classification characteristics under California or federal law |
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information). |
Yes |
|
D. Commercial information |
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. |
Yes |
|
E. Biometric information |
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data. |
Yes |
|
F. Internet or other similar network activity |
Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement. |
Yes |
|
G. Geolocation data |
Physical location or movements. |
Yes |
|
H. Sensory data |
Audio, electronic, visual, thermal, olfactory, or similar information. |
Yes |
|
I. Professional or employment-related information |
Current or past job history or performance evaluations. |
Yes |
|
J. Non-public education information |
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records. |
Yes |
|
K. Inferences drawn from other personal information |
Profile reflecting a person's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
Yes |
Personal information does not include:
Information we obtain from your use of our website or mobile apps
The data we collect about website usage from cookies is not tied to your personal information and is only used in an aggregated form for the purposes of our own customer support, analytics, research, and improving our website. When you use features such as "Remember My Username," the cookie is associated with your personal information in order to provide you with a more convenient experience. We do not sell or transfer the data we obtain from cookies for a monetary value. We use cookies to evaluate website usage or provide energy services to you, or to offer programs and/or services that you may be interested in.
You may disable our usage of cookies through your browser settings. Please note that if you disable your browser's ability to accept cookies, you will be able to navigate PG&E's website, but you will not be able to take advantage of certain features, such as "Remember My Username," and will not receive targeted advertisements related to our programs or services. In addition, you must contact our business partners directly to disable their use of cookies about you that you have consented them to use based on your use of their on-line services.
You may also click on the Do Not Sell My Personal Information button or call us at 1-800-743-5000 to direct PG&E to not sell your personal information without your consent.
Targeted Communications on Social Media Sites
We use social media sites like Facebook and Twitter to communicate with you about our programs and services. You can follow us on these social media sites to receive regular updates. These social media sites also allow us to target ads to you using the information they maintain about you with your consent, even if you do not specifically follow us on their site. We may target ads to you using information such as cookies, pixels, zip codes, and interests.
You will only see our targeted ads if you agreed to receive this type of communication through your social media provider. You may be able to disable some, or all the advertising targeted to you on a social media site by adjusting your privacy settings on their site. Please see our Social Media Guidelines for more information.
Web Browser "Do Not Track" Signals and Other Similar Mechanisms
Our website does not respond to "Do Not Track" signals. "Do Not Track" signals are used by some Web browsers to attempt to limit tracking related to your visits to a website.However, our website does provide an option for viewers to opt out of the transmittal of "cookies" about their viewing data to third parties.
Links to other websites
While browsing PG&E's website or online services not sponsored by PG&E, you may encounter and choose to access websites or online services operated by PG&E business partners, companies or agencies that may not be associated with PG&E by clicking on hypertext links or icons. These websites may send their own cookies to you, log your IP address, and/or otherwise collect data or personal information about you and your online activities. PG&E does not control and is not responsible for what outside entities do in connection with their websites or online services, or how they handle your personal information. Please use caution and consult the privacy policies posted on each outside website that you visit for further information.
PG&E collects, uses, and discloses your personal information to fulfill the following business and legally required purposes:
Sharing Personal Information with Service Providers and Third Parties
In order to provide you with services or to complete transactions requested by you, we may transfer your personal information to service providers who act on our behalf. Service providers acting on PG&E's behalf are required to follow the similar privacy and security practices as PG&E and are subject to an extensive security review of their data handling processes before PG&E permits any sharing of personal information, except as subject to different requirements under applicable laws or regulations.
PG&E does not disclose a consumer's personal information to any other person or business entity without your prior consent, except as necessary for the purposes listed above.
PG&E may share aggregated, non-customer specific data and information derived from personal information with other entities for the purpose of performing activities that may help PG&E provide and improve its utility products and services, including such programs as Energy Efficiency and Demand Response, or to inform California energy policy as directed by the California Public Utilities Commission and other California government agencies which regulate PG&E.
If permitted by law, we typically disclose, and have disclosed within the preceding twelve (12) months , the following categories of personal information to the following categories of entities for a business purpose or to comply with legal obligations:
Categories of Entities | Categories of Personal Information Disclosed | |
---|---|---|
Utility Service Providers, Vendors, Contractors Which Provide Equipment, Products, Services and Plans to Support PG&E’s Safe, Reliable and Secure Public Utility Services, Products and Programs Provided to Customers and For Other Necessary Business Purposes |
|
|
Third Parties Receiving Personal Information Pursuant to a Valid Legal Warrant, Subpoena, Court Order or Legal or Regulatory Mandate, or Necessary for PG&E to Defend or Assert Legal Claims |
|
|
Regulatory Agencies, including the California Public Utilities Commission, California Energy Commission, and Federal, State or Local Agencies or Representatives with Authority to Obtain the Information |
|
|
First responders and other government entities during public safety emergencies |
|
|
Financial institutions, credit agencies, and other financial services entities providing financial and auditing support services for PG&E’s public utility programs and services |
|
|
Service Providers, Contractors, Vendors and Other Third Parties Which Provide Support for PG&E General Business Processes and Purposes |
|
Sharing Personal Information at Your Choice
You may authorize other companies or persons to receive your personal information from PG&E, including your Energy Usage Data. Before sharing information, it is important that you understand how other parties intend to use your information, if they will share it with others, and your rights as a consumer. We encourage you to protect the confidentiality of your username and password and other personally identifiable information specific to your PG&E account.
Selling Personal Information
Except possibly for "cookies" obtained by third parties when you visit PG&E's website or online services, PG&E has not sold consumers' personal information in the preceding 12 months for any monetary value and does not intend to sell in the future for any monetary value. However, we could be involved in programs that could be considered a "sale" under the California Consumer Privacy Act, such as in connection with cookies that our business partners may have collected on our website or online services in the preceding 12 months. If you have visited PG&E's website or a website operated on behalf of PG&E in the last twelve months, electronic "cookies" and other metadata about you may have been obtained by PG&E business partners for their commercial use, unless you have disabled or opted-out of the use of your "cookies" when you visited the websites.
PG&E does not and will not sell the personal information of minors under 16 years of age without affirmative authorization.
Click the Do Not Sell My Personal Information button on the website you have visited or call us at 1-800-743-5000 to direct PG&E to continue to not sell your personal information without your consent.
We retain your personal information based on legal requirements or business needs. Generally, we only retain personal information for as long as is reasonably necessary for our business purpose or as required by law. Secure disposal methods are used when information is no longer needed.
Most customers have secure access to information about them through their monthly bills or their online account on our website. To help protect your privacy and provide you with quality service, we rely on you to provide us with complete and accurate information. If you think the information, we have about you is inaccurate or outdated, we encourage you to contact us at your earliest convenience to update or correct the information. You may update or correct your information by calling the number listed in the "Contact Us" section below, or by signing into your online account through the Your Account portal at pge.com to edit your profile.
We offer certain choices about how we communicate with you and what Personal Information you provide to us. In some cases, you have the right to limit, or opt-out of, the information you provide to us.
As indicated above, the California Consumer Privacy Act provides California consumers (California residents) with specific rights regarding their personal information. This section describes your rights under the California Consumer Privacy Act and explains how to exercise those rights.
Access to Personal Information Upon a Verified Request
You have the right to request that PG&E disclose certain information to you about our collection and use of your personal information over the past 12 months.
You may review those rights, including submitting a verifiable request to access the personal information we collect about you, at the following link: https://pgeipaprod.service-now.com/privacy_consumer.
Once we receive and confirm your verifiable consumer request (see Exercising Your Access, Data Portability, and Deletion Rights), we will disclose to you:
Deletion Request Rights
In addition, you have the right to request that PG&E delete any of your personal information that we collected from you, subject to certain exceptions, including when required to be retained by law or for our essential business or public utility purposes, such as providing services or products to you. These exceptions include record retention schedules and other requirements mandated by the California Public Utilities Commission that effectively prohibit deletion of certain personal information.
Once we receive and verify your consumer request, we will delete your personal information from our records, unless an exception applies.
Exercising Your Access, Data Portability, and Deletion Rights
To exercise the access, data portability, and deletion rights described above, please submit a request using one of the following methods:
PG&E cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. When you submit a request, we will verify your identity either using third party identity verification services or by reviewing your government-issued ID.
Making a verifiable consumer request does not require you to create an account with us.
We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request and whenever feasible, we will match the provided identifying information to the personal information provided when you started your PG&E utility service. If you wish to authorize a third party to make a request on your behalf through an authorized agent, you must contact the PG&E Privacy Team directly and must provide a valid California power of attorney or comparable documentation of written permission from you and verification of your identity with PG&E. Such power of attorney must meet the requirements of Probate Code sections 4000 to 4465.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period.
You may also make a verifiable consumer request on behalf of your minor child.
Response Timing and Format
We will respond to a verified consumer request for personal information within 45 days of receipt. If we require more time (up to 45 additional days), we will notify you of the reason and extension period in writing. We will deliver our written response by mail or email address submitted by you and through a secure link, at your preference. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response will also explain the reasons we cannot comply with a request, if applicable.
For data portability requests, we will select a format to provide your personal information that is reasonably useable for transmittal of the information from one entity to another entity.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
Personal Information Sales Opt-Out and Opt-In Rights ("Do Not Sell")
If you are 16 years of age or older, you have the right to direct us to not sell your personal information at any time (the "right to opt-out"). We do not sell the personal information of consumers we actually know are less than 16 years of age, unless we receive affirmative authorization (the "right to opt-in") from either the consumer who is at least 13 but not yet 16 years of age, or the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to personal information sales may opt-out of future sales at any time. Except possibly for "cookies" obtained by third parties when you visit PG&E's website or online services, PG&E has not sold consumers' personal information in the preceding 12 months for any monetary value and does not intend to sell in the future for any monetary value. However, we could be involved in programs that could be considered a "sale" under the California Consumer Privacy Act, such as in connection with cookies that our business partners may have collected on our website or online services in the preceding 12 months. If you have visited PG&E's website or a website operated on behalf of PG&E in the last twelve months, electronic "cookies" and other metadata about you may have been obtained by PG&E business partners for their commercial use, unless you have disabled or opted-out of the use of your "cookies" when you visited the websites.
To exercise the right to opt-out of the sale of your personal information, you (or your authorized representative) may submit a request to us by clicking on the "Do Not Sell My Personal Information" button or calling us at 1-800-743-5000.
Non-Discrimination
We will not discriminate against you for exercising any of your California Consumer Privacy Act rights. Unless permitted by law, PG&E will not as a result of you exercising your privacy rights under the California Consumer Privacy Act:
Protecting personal information is a top priority for PG&E. We take extensive measures to ensure the integrity of our systems and protect your personal information. We continuously implement and update administrative, technical, and physical security measures to help protect personal information about you from unauthorized access, destruction, or alteration. In addition, any account information you enter while logged in to your online account, or that is displayed on our website in your browser window, is secured using an industry standard security technology known as Secure Sockets Layer ("SSL"). By using SSL, we attempt to protect the confidentiality of your personal and financial information. Your browser must be capable of supporting SSL. Please check with your browser manufacturer for details.
Children's privacy is important. We have areas of our website intended for use by children that contain information about energy and safety. We also provide free classroom materials for teachers about energy awareness and safety. We do not monitor the age of users of the website and do not intentionally collect information from children under the age of 13. If you are under the age of 13, you should not submit personal information on this website or any other website without the consent of your parent or guardian.
We will review this Privacy Policy when significant changes occur and at least every 12 months. We will notify you of material changes through updates on PG&E's website, pge.com, including how to obtain prior versions of this Privacy Policy upon request. We will also notify you annually in a bill insert to revisit the most updated version of this Privacy Policy on our website.
If you have questions, concerns, or complaints about this Privacy Policy, would like to request a current or previous version, or would like more information regarding our process for updating this Privacy Policy, you can contact us using the following options:
PG&E Residential and Business Customer Service
Correspondence Management Center
Attention: Privacy Management
P.O. Box 997310
Sacramento, CA 95899-7310
PG&E Residential Customers: Call 1-800-743-5000
PG&E Business Customers: Visit the Business Customer Service Center
Email: pgeprivacy@pge.com