Visa Candidate Privacy Notice | Visa

Visa Candidate Privacy Notice

Effective date: March 26, 2026

This Candidate Privacy Notice (“Notice”) explains how Visa and its Affiliates around the world collect, use, and share Personal Information (as defined below) when you are identified as a prospect for a job, and/or apply for a job at Visa.

As a global payments technology company, Visa fulfills many roles. Where Visa acts as a controller under applicable laws and collects information directly from candidates, the controller is typically a Visa Affiliate. Visa’s Affiliates are companies that are directly or indirectly controlled by Visa U.S.A. Inc. or its parent company Visa Inc. through ownership — for example, Visa International Service Association, Visa Worldwide Pte. Limited, Visa Canada Corporation, Visa International Servicios de Pago España, S.R.L., Visa Europe Limited, Visa do Brasil Empreendimentos Ltda, CardinalCommerce Corporation, CyberSource Corporation, and Verifi, Inc. The controller of your Personal Information is the Visa entity to which you have applied for a role. The Visa Affiliates to which you may have applied, along with their contact details, is available in our Visa Legal Entities list.

Existing Visa employees: This Notice applies to the processing of your Personal Information as a candidate for a position at Visa. If you are an existing Visa employee, please also refer to the Visa Employee Global Privacy Notice available via Visa’s intranet to learn more about how we process your Personal Information in the context of your employment with Visa.

Categories of Personal Information

“Personal Information” refers to information that (alone or when used in combination with other information) is capable of being associated with or could reasonably be associated with an individual. Personal Information is also sometimes referred to as “personal data”.

Depending on our relationship and interactions with you, the categories of Personal Information we collect may include:

Contact Information – This includes your name, username, mailing address, email address, phone number, and professional social media profile names, and other information you provide to allow us to contact you.
Relationship Information – This includes information that you voluntarily provide to offer you personalized content if you choose to join our talent communities, such as data from professional social media profiles and information about your interests.
Interaction Information – This includes information about your interactions with Visa, such as:
- Information collected when you participate in Visa programs such as the Visa talent community;
- Information collected when you contact Visa Privacy, such as if you contact our talent acquisition team;
- Visitor logs when you visit one or more of our Visa facilities;
- Other information you provide to us, such as data collected for authentication of your account profile (e.g., passwords or account security questions);
Audio and Visual Information – This includes audio, electronic, visual, or similar information relating to your interactions with us, including photographs (e.g. in your CV or as published on your professional social media profiles), video images, CCTV recordings, call recordings, and voicemails.
Online and Technical Information – This includes information regarding your interactions with our websites, applications or advertisements, including IP address, device identifiers, settings, characteristics, advertising ID, browsing history, web server logs, server log records, activity log records, keystroke timing and other information collected using cookies and similar technologies.
Government Issued Identification Numbers – This includes social security number, driver’s license number, passport number, national I.D., and other government issued identifiers, as permitted by applicable law.
Geolocation Information – This may include precise geolocation information, which we may collect when you apply for a position with Visa via our website or mobile app, if you opt-in to allow us to collect it via our preference management tools.
Professional and Employment Information – This includes professional or employment-related information for applicants and candidates, including applicant and resume data, such as education and work history; information about qualifications for the position, such as skills and credentials; professional interests and goals; information collected for employee qualifications, such as right to work documentation; certifications, skills and skills assessments relevant to a position, and references. Please note this may include criminal conviction or offense information – This includes information regarding prior convictions or offences and statements from you regarding such convictions or offences, as permitted by applicable law.
Compliance Information – This includes records maintained to demonstrate compliance with applicable laws in certain jurisdictions; which may include records related to data subject rights requests.

Some of the Personal Information in these categories may be considered sensitive Personal Information or “special category data” in some jurisdictions. Such Personal Information will only be processed to the extent permitted by law (see the section entitled “Why We Collect Personal Information and How we use It” for more information).

Sources of Personal Information

We may collect Personal Information about you from various sources, depending on our relationship and interaction with you. These sources may include:

You, such as when you apply for a job at Visa, enroll in Visa talent management programs, enroll in a talent community, attend a networking or on-campus recruiting event, or provide survey responses to us;
Your computer or devices when you interact with our platforms, websites, and applications or through other automatic technologies, such as when we record interviews (including where we use artificial intelligence assisted transcription of interviews) and use CCTV cameras in our facilities;
Job recruitment agencies;
Service providers and third parties that provide verification and vetting services for us (such as your references and third parties that help us conduct background checks, screenings, and internal investigations when required and in accordance with applicable law); and
Publicly available sources, including professional social media platforms.

Why We Collect Personal Information and How We Use It

Visa processes the Personal Information of candidates lawfully and to the extent necessary for the purposes detailed in the following table:

Purpose for Collecting and Sharing	Categories of Personal Information	Legal Basis for Processing (Where required under applicable law)
To manage your application, schedule and manage interviews, and evaluate you for a position during the recruitment process.	- Contact Information - Relationship Information - Interaction Information - Audio and Visual Information - Professional and Employment Information - Geolocation Information	- To take steps at your request as a candidate prior to entering into an employment contract, where applicable.
Based on your choices, identify skills that might apply to you or grade your job application against the position’s requirements using automated tools including artificial intelligence.	- Contact Information - Professional and Employment Information	- For the purposes of our own legitimate interests to manage recruitment and talent acquisition initiatives and efforts.
Based on your choices, to allow for transcription of interviews, using automated tools including artificial intelligence.	- Audio and Visual Information - Professional and Employment Information	- For the purposes of our own legitimate interests to manage recruitment and talent acquisition initiatives and efforts.
Add you to the Visa Talent Network and consider you for future positions based on information you have provided.	- Contact Information - Relationship Information - Interaction Information - Audio and Visual Information - Professional and Employment Information - Geolocation Information	- For the purposes of our own legitimate interests to manage recruitment and talent acquisition initiatives and efforts.
Based on your choices, using automated tools including artificial intelligence to suggest you for open roles that best fit your skills based on the information you have provided via the Visa Talent Network.	- Contact Information - Professional and Employment Information - Geolocation Information	- For the purposes of our own legitimate interests to manage recruitment and talent acquisition initiatives and efforts.
To generate de-personalized, de-identified, anonymized, or aggregated datasets, which are used to train and improve automated tools (including artificial intelligence) that Visa uses in recruitment efforts and initiatives.	- Professional and Employment Information	- For the purposes of our own legitimate interests to train and improve recruitment efforts and initiatives.
Hiring decisions, including negotiation of compensation, benefits, relocation packages, drafting and execution of employment contracts and offers, immigration support, and re-employment.	- Contact Information - Relationship Information - Interaction Information - Audio and Visual Information - Government Issued Identification Numbers - Professional and Employment Information - Compliance Information	- To take steps at your request as an applicant or candidate prior to entering into an employment contract, where applicable.
Determining eligibility to work and assisting with work permits or visas.	- Contact Information - Relationship Information - Interaction Information - Audio and Visual Information - Government Issued Identification Numbers - Professional and Employment Information - Compliance Information	- To take steps at your request as an applicant or candidate prior to entering into an employment contract, where applicable.
Conducting reference checks, vetting and verifications (when required by applicable law) and background checks (as permitted by applicable law).	- Contact Information - Relationship Information - Interaction Information - Audio and Visual Information - Government Issued Identification Numbers - Professional and Employment Information - Geolocation Information - Compliance Information	- For the purposes of our own legitimate interests to assess the applicant or candidates' suitability for the intended position and prevent any risk of fraud.
Based on your choices, deliver talent network communications.	- Contact Information - Relationship Information - Interaction Information - Online and Technical Information - Professional and Employment Information - Geolocation Information	- Your consent.
Administer recruiting surveys, programs, and events, and for related services.	- Contact Information - Relationship Information - Interaction Information - Online and Technical Information - Audio and Visual Information - Government Issued Identification Numbers - Geolocation Information	- For the purposes of our own legitimate interests to manage recruitment and talent acquisition initiatives and efforts.
For analytics and modeling and to create business intelligence and insights and to understand hiring trends, and to generate de-personalized, de-identified, anonymized, or aggregated datasets, which are used for Visa business insights.	- Contact Information - Relationship Information	- For the purposes of our own legitimate interests to carry out analytics and / or create business insights regarding recruitment.
Risk management, including premises monitoring.	- Contact Information - Relationship Information - Interaction Information - Inferred and Derived Information - Online and Technical Information - Audio and Visual Information - Government Issued Identification Numbers - Geolocation Information - Compliance Information	- For the purposes of our own legitimate interests to ensure safety and security of persons and property.
Identity and credential management, including identity verification and authentication, issuing ID cards and badges, facilities management, system administration and management of access credentials.	- Contact Information - Relationship Information - Interaction Information - Inferred and Derived Information - Online and Technical Information - Audio and Visual Information - Government Issued Identification Numbers - Geolocation Information - Compliance Information	- For the purposes of our own legitimate interests to ensure safety and security of persons and property.
Security, loss prevention, Information security and cybersecurity.	- Contact Information - Relationship Information - Interaction Information - Inferred and Derived Information - Online and Technical Information - Audio and Visual Information - Government Issued Identification Numbers - Geolocation Information - Compliance Information	- For the purposes of our own legitimate interests to ensure security of Visa’s resources and ensure business continuity.
Legal and regulatory compliance: all uses of Personal Information that are required by law or to assess, manage or investigate compliance with laws, or other policies and procedures.	- As required to comply with applicable legal obligations and with internal policies and procedures	- For the purposes of our own legitimate interests to ensure compliance with legal obligations and with internal policies and procedures.
To respond to your requests in accordance with applicable law.	- As needed to provide a response	- To comply with the laws and regulations that are applicable to us (e.g. in relation to your requests to exercise your rights over your Personal Information).
To establish, exercise or defend against legal claims.	- As needed for the relevant litigation	- For the purposes of our own legitimate interests to defend applicable rights and those of our staff and clients.
Making back-up copies for business continuity and disaster recovery purposes.	- Back-up copies of Personal Information as retained by Visa	- For the purposes of our own legitimate interests to ensure business continuity.
As needed to facilitate corporate governance, including mergers, acquisitions and divestitures.	- As needed for the business transaction	- For the purposes of our legitimate interests to expand or sell our business operations.

Why We Collect Personal Information and How We Use It

In some jurisdictions, Visa processes special categories of data, also sometimes called sensitive personal information as defined in applicable data privacy laws (such as information about racial or ethnic origin, religious or philosophical beliefs, health information), only for specific purposes (such as in connection with our diversity and social governance program) and as otherwise authorized by you (such as if you participate in our talent community groups), justified by an appropriate legal basis, as set out in the in the table above, and by one of the following additional conditions:

You have given explicit consent to the processing of such special categories of personal data and sensitive personal information;
The processing is necessary for the purposes of carrying out Visa’s obligations and protecting your rights in the field of employment law, social security and social protection law;
The processing is necessary for Visa as an employer for the purposes of protecting your vital interests, of preventive or occupational medicine, for the assessment of your working capacity, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services; or
The processing is necessary for the establishment, exercise or defense of legal claims.

Visa may also process data about any prior criminal convictions and offences as part of background checks, if permitted for specific roles or by applicable law.

AI Tools

No employment decision will be based solely on automated decision-making. While Visa may use automated tools including artificial intelligence (AI Tools), every decision to review, interview, offer to hire, or reject a candidate for a specific role, and all related employment decisions, are made involving human judgment and intervention. Additional details about how Visa uses automated tools including artificial intelligence is described in this section and the section entitled “Why We Collect Personal Information and How we use It.”

You may contact Visa Privacy using the details in the “How to Contact Visa Privacy” section to request further information about how our recruiters make decisions about your job application. You may also exercise your Privacy Rights regarding your Personal Information at any time, as outlined in the Section entitled “Your Privacy Rights” below.

Notice Regarding Use of AI Tools in Recruiting

To support our recruiters and enhance efficiency, we may use certain AI-powered tools to assist with administrative and productivity-related tasks during recruitment. These tools are designed to help streamline processes and improve the candidate experience. As stated above, all hiring decisions will involve meaningful human review and judgment.

How AI Tools May Be Used:

To assist recruiters in identifying candidates whose experience and qualifications align with the requirements of a role;
To suggest potential role matches based on candidate-provided information (skills, experience, and stated interests);
To suggest skills based that may apply to candidates based on candidate-provided information; and/or
To improve recruiter productivity and candidate experience by streamlining administrative tasks.

Information AI Tools May Use:

Details provided by candidates during the application process (e.g., resume/CV content, responses to application questions, and information about skills, experience, and qualifications), including education and professional experience, certifications or credentials identified in job posting, and role‑specific requirements described in the requisition.
AI tools do not use sensitive Personal Information or protected characteristics.

Categories of Third Parties and Our Disclosure of Personal Information

Due to the global nature of Visa’s operations, Visa may disclose Personal Information to recipients in other countries, as listed below:

To other Visa Affiliates, which will handle your Personal Information for the purposes defined in this Notice;
To our third party service providers (including background check vendors), data processors and contractors. Visa enters into contractual obligations with third parties to ensure appropriate protection for Personal Information.
When required to do so by law, such as to law enforcement agencies, government agencies, regulators, and courts in countries where we operate;
When permitted by law, such as when we sell or transfer business assets, enforce our contracts, protect our property or the rights, property or safety of others;
On a need-to-know basis to Visa personnel and external counsels for audits, compliance and corporate governance; and
To recruiting agencies and your references.

Your Privacy Rights

We respect your privacy rights in accordance with applicable data privacy laws. Depending on your jurisdiction, you may have the following rights:

Right to access: You may have the right to obtain confirmation of the existence or non-existence of the processing of your Personal Information and receive copies of such Personal Information.
Right to rectify: You may have the right to request that we rectify inaccuracies in your Personal Information or that we complete it.
Right to deletion: You may have the right to ask us to delete your Personal Information in the following cases:
when they are no longer necessary for the purposes for which they were collected;
you have revoked your consent;
following the exercise of your right to object;
your Personal Information has been processed unlawfully; or
to comply with a legal obligation.

Visa is not obligated to comply with your request to delete your Personal Information, in particular if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.

Right to restrict: You may have the right to ask us to restrict the processing of your Personal Information (i.e., to retain it without using it) when:
its accuracy is disputed;
its processing is unlawful, but you do not want it deleted;
it is still necessary for the establishment, exercise or defense of legal claims;
we need to verify the existence of compelling reasons in connection with the exercise of your right to object.

We may continue to use your Personal Information following a request for restriction (i) with your consent, or (ii) for the establishment, exercise, or defence of legal claims; or (iii) to protect the rights of any other natural or legal person.

Right to portability: You may have the right to ask us to provide you with your Personal Information in a structured, commonly used, and machine-readable format, or you may request that it be transmitted directly to another controller, but only if the processing is based on your consent or the performance of a contract with you and the processing is automated.
Right to withdraw your consent: You can withdraw your consent to process your Personal Information at any time, if the processing is based on your consent, without affecting the lawfulness of the processing carried out prior to your withdrawal of consent. Where you have signed up to receive notifications related to the Visa Talent Network, you may unsubscribe by accessing the links within any of those notifications.
Right to object: Where we rely upon our legitimate interests to process your Personal Information, then you have the right to object to that processing. In such case, we must stop that processing unless we can either demonstrate legitimate grounds for the processing that override your interests, rights, and freedoms or where we need to process your Personal Information for the establishment, exercise, or defense of legal claims.

You can also contact applicable data protection officers using the contact information in the section entitled “How to Contact Visa Privacy.” If you have any concerns about how Visa processes your Personal Information, you may also be entitled to lodge a complaint with your local data protection authority. We encourage you to contact Visa Privacy first, via privacy@visa.com, so we can address your concerns directly.

California Privacy Notice – No “Sell” or “Share” of Candidate Personal Information

Visa does not “sell” or “share” candidate Personal Information as those terms are defined under California law (including the California Consumer Privacy Act as amended by the California Privacy Rights Act). “Share” includes disclosure for cross‑context behavioral advertising. Visa also does not use candidate Personal Information for cross‑context behavioral advertising.

Because Visa does not sell or share candidate Personal Information, the right to opt‑out of sale or sharing does not apply to candidate Personal Information.

International Transfers

Visa is based in the United States and has Affiliates and service providers around the world. Visa may transfer your Personal Information between countries, including to countries which may not have similar privacy or data protection laws as your country of origin. We may transfer your Personal Information to our main data centers in the United States, as well as our other data centers, such as our data center in Europe or a local data center in your country where applicable. However, we will always protect your Personal Information as described in this Notice, no matter where it is stored, and transfer it in accordance with any applicable legal requirements for cross-border transfer of Personal Information.

Whenever we transfer your Personal Information out of the EEA, Switzerland or the UK, we take steps to ensure that such transfers are carried out in accordance with applicable laws and regulations. Your Personal Information may be transferred to a country which benefits from an adequacy decision (i.e. countries that have been recognized by the European Commission as providing an appropriate level of protection for Personal Information). If your Personal Information is transferred to a country which does not benefit from an adequacy decision (example: to the United States) and which is considered as not providing the same level of protection as the EEA, Switzerland or the UK, Visa will ensure that such transfers are made subject to appropriate safeguards as required by applicable data privacy laws, in particular the Standard Contractual Clauses approved by the European Commission, and that these appropriate safeguards are supplemented by additional contractual, technical and organizational measures as necessary.

Information Security and Data Retention

We use physical, technical, organizational, and administrative safeguards to help protect your Personal Information from unauthorized access or loss. For example, we use encryption and other tools to protect sensitive information.

We retain your Personal Information for as long as necessary to fulfill the purposes outlined in this Notice unless a longer retention period is required or permitted by law. When determining the retention period, Visa considers criteria such as the purpose for processing your Personal Information, legal and regulatory requirements, business needs or as needed in the management of legal claims or proceedings. Such retention periods may vary depending on your jurisdiction and are included in Visa’s retention policies which reflect local legal requirements. For further information on applicable retention periods, please submit a query to privacy@visa.com.

Privacy Notices of Third Parties

This Notice explains how Visa and its Affiliates handle your Personal Information. Social media platforms and other websites that may be accessed through Visa’s websites, or that may display Visa job postings, also have their own privacy policies. We encourage you to read the privacy notices provided by these sites before you give them your information.

Changes to This Notice

We may update this Notice from time to time. Therefore, we encourage you to check this Notice regularly so that you are fully aware of any changes or updates. We will post an alert online if the changes are material. If the changes will materially affect the way we use Personal Information that we have already collected, we will also notify you.

How to Contact Visa Privacy

Questions regarding this Notice, or how it applies to you, should be directed to the applicable Data Protection Officers within Visa by submitting a query to privacy@visa.com.