PRIVACY NOTICE TO CALIFORNIA RESIDENTS

Changes to Our California Privacy Notice

PNC will update this notice in response to changing legal, technology, or business developments. We will post the most up-to-date notice on pnc.com/privacy. You can see when the notice was last updated by checking the “last updated” date displayed at the top. For questions, please contact PNC as noted below.

The California Consumer Privacy Act (CCPA) and the regulations promulgated thereto, each as amended, including pursuant to the California Privacy Rights Act of 2020 (CPRA) requires us to notify California residents (unless an exemption applies) of the categories of personal information we collect about them, with reference to the categories set forth under the CCPA, and the purposes for which we will use such categories of personal information.

Categories of Personal Information Collected:

The relevant categories of personal information PNC may collect about California residents includes:

• Identifiers: such as real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol (IP) address, email address, account name, Social Security Number, driver’s license number, passport number, or other similar identifiers.

• Customer records: such as paper and electronic customer records containing personal information, such as name, signature, Social Security Number, physical characteristics or description, etc.

• Protected classifications under California or federal law: such as age, race, color, ancestry, national origin, citizenship or immigration status, religion or creed, marital status, sex (including gender identity or expression, sexual orientation), medical condition, veteran or military status, physical or mental disability, etc.

• Commercial information: such as records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

• Biometric information: such as genetic, biological characteristics, etc. such as, fingerprints.

• Internet or other electronic network activity information: such as browsing history, search history, website interaction, etc.

• Geolocation data: such as precise physical location or movements within 1850 feet.

• Sensory data: such as audio, electronic, visual, thermal, olfactory, or similar information.

• Employment information: such as current or past job history or performance evaluations.

• Education Information: Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). This category of PII is not collected by PNC.

• Profiles or inferences: such as profiles reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

• Sensitive Personal Information: Personal information that reveals a consumer’s social security, driver’s license, state identification card, or passport number; account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; precise geolocation; racial or ethnic origin, religious or philosophical beliefs, or union membership; contents of a consumer’s mail, email, and text messages unless the business is the intended recipient of the communication; or genetic data.

Purposes of Collection, Use, and Disclosure:

We may collect, use, and disclose the above categories of personal information as follows:

• To provide the services for which the information was provided, including to maintain and administer any accounts you open with us and to process transactions and payments.

• For authentication, identity verification, and fraud prevention and detection.

• To process and respond to or address your questions and investigate and resolve any issues.

• To personalize your experience using our websites and services.

• To communicate with you, including transactional and account-related information as well as news, updates, and marketing communications. To improve and develop products and services and for other research and analytics purposes.

• To respond to authorized regulatory, compliance, and legal process.

• To evaluate or conduct a merger or to sell or transfer some or all of PNC’s assets.

• To protect and defend our rights and interests and those of third parties, including in defense of litigation and other claims against us.

Not covered by this Notice:

This Notice does not address or apply to any of the nonpublic information we collect about consumers, pursuant to the Gramm-Leach-Bliley Act (GLBA) or otherwise subject to an exemption under CPRA Section 1798.145. For information, please review our Privacy Notice. For more details and information about the personal information we collect and how we collect, use and disclose such personal information (as defined by the CPRA) and your rights regarding such personal information, please call 1-888-PNCBANK (1-888-762-2265) or visit us at pnc.com/privacy.

A Spanish version of this document is available at pnc.com/privacy as a courtesy to our clients who use Spanish as their primary language. Although PNC has taken every precaution possible to translate the original document correctly, the Spanish translation is only a courtesy to our clients. Please take note that all official documents from PNC will be in English only.