Privacy Policy

1. Overview

BMO Harris Bank N.A. ("BMO Harris Bank," "we," "us," or "our") respects your privacy and is committed to protecting your personal and financial information. This Privacy Policy describes how BMO Harris Bank collects, uses, shares, and safeguards the personal information of customers, users of BMO Harris online banking, and visitors to our websites and mobile applications.

This policy applies to all products and services offered by BMO Harris Bank, including personal banking accounts, business banking accounts, mortgages, loans, credit cards, investment services, and digital services accessed via BMO Harris bank login portals.

By using BMO Harris Bank services, opening an account, or accessing BMO Harris online banking, you acknowledge and agree to the practices described in this Privacy Policy. Please read this document carefully.

2. Information We Collect

2.1 Information You Provide Directly

When you open a BMO Harris Bank account, apply for a loan, or use BMO Harris online banking, we collect information you provide directly, including:

• Full legal name, date of birth, and Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN)
• Current and previous home addresses, email addresses, and phone numbers
• Employment information, income, and financial history
• BMO Harris bank login credentials including username (we never store passwords in plain text)
• Beneficiary and joint account holder information
• Documents you submit for identity verification (government-issued ID, utility bills, etc.)

2.2 Information Collected Automatically

When you use BMO Harris online banking or visit our websites, we automatically collect:

• IP address, browser type, and operating system
• Device identifiers, including mobile device IDs
• Login timestamps and session activity within BMO Harris bank login sessions
• Pages visited, links clicked, and features used
• Transaction data, account balances accessed, and queries made
• Geographic location data (with your permission for location-based branch finding)

2.3 Information from Third Parties

BMO Harris Bank may receive information about you from third parties including:

• Credit reporting agencies (Equifax, Experian, TransUnion)
• Identity verification services and fraud prevention networks
• Government databases for regulatory compliance (AML, KYC)
• Data aggregators (when you link external accounts to BMO Harris online banking)
• Employers and financial references you provide during loan applications

3. How We Use Your Information

BMO Harris Bank uses your personal and financial information for the following purposes:

Purpose	Examples	Legal Basis
Service Delivery	Processing transactions, maintaining your accounts, enabling BMO Harris online banking access	Contract performance
Fraud Prevention & Security	Monitoring BMO Harris bank login activity, detecting unauthorized transactions, identity verification	Legal obligation / Legitimate interest
Regulatory Compliance	Anti-money laundering (AML), Know Your Customer (KYC), tax reporting, FDIC requirements	Legal obligation
Customer Communication	Account alerts, product updates, service notifications, BMO Harris Bank news	Contract performance / Consent
Product Improvement	Analyzing how customers use BMO Harris online banking to improve features and usability	Legitimate interest
Marketing	Sending personalized offers for BMO Harris products (opt-out available)	Consent / Legitimate interest
Credit Decisions	Assessing loan applications, setting credit limits, evaluating mortgage eligibility	Contract performance / Legal obligation

4. Sharing Your Information

BMO Harris Bank does not sell your personal information to third parties. We may share your information with:

4.1 BMO Financial Group Affiliates

As a subsidiary of Bank of Montreal (BMO), BMO Harris Bank may share information with affiliated entities within the BMO Financial Group for the purposes of service delivery, risk management, and regulatory compliance.

4.2 Service Providers

We work with carefully vetted third-party service providers who assist in operating BMO Harris online banking, processing payments, providing customer support, and conducting fraud analysis. All service providers are contractually bound to protect your information and may only use it for the specific purposes we authorize.

4.3 Legal and Regulatory Requirements

BMO Harris Bank may disclose information to regulators, law enforcement agencies, courts, and government bodies when required by law, including responding to subpoenas, complying with the Bank Secrecy Act, and reporting suspicious activity to FinCEN.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and the Privacy Policy that will apply going forward.

5. Online Banking Privacy

Your BMO Harris bank login sessions are protected by strict technical and organizational security measures. BMO Harris Bank does not monitor the specific content of your messages to other bank customers, but we do log login activity, device information, and transaction data as part of our fraud prevention and security program.

If you access BMO Harris online banking from a shared or public computer, always log out completely after each session. BMO Harris Bank will never ask for your full password, PIN, or security questions via email, phone, or text message.

6. Cookies & Tracking Technologies

BMO Harris Bank uses cookies, web beacons, and similar technologies on our websites and within BMO Harris online banking to:

• Essential cookies: Required for secure BMO Harris bank login sessions and core functionality — cannot be disabled
• Performance cookies: Measure how users interact with BMO Harris online banking to improve the experience
• Functional cookies: Remember your preferences such as language and location settings
• Analytics cookies: Help us understand website traffic patterns and improve our services

You can control non-essential cookie preferences through your browser settings or our cookie consent manager. Note that disabling certain cookies may affect the functionality of BMO Harris online banking.

7. Data Security

BMO Harris Bank employs industry-leading security measures to protect your personal and financial information, including:

• 256-bit SSL/TLS encryption for all BMO Harris online banking sessions and data transmissions
• Multi-factor authentication (MFA) for BMO Harris bank login
• Real-time fraud monitoring and anomaly detection systems
• Regular third-party security audits and penetration testing
• Employee security training and strict internal access controls
• Physical security at all BMO Harris Bank data centers and branch locations
• Compliance with FFIEC, NIST, and PCI-DSS security standards

In the event of a data breach that may affect your information, BMO Harris Bank will notify you promptly in accordance with applicable state and federal breach notification laws.

8. Your Privacy Rights

As a BMO Harris Bank customer, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information BMO Harris Bank holds about you
• Right to Correction: Request correction of inaccurate or incomplete information
• Right to Opt-Out of Marketing: Opt out of receiving marketing communications at any time by calling 1-888-340-2265 or updating your preferences in BMO Harris online banking
• Right to Limit Sharing: Under federal law, you have the right to limit certain sharing of your financial information with BMO Financial Group affiliates for marketing purposes
• Right to File a Complaint: File a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov if you believe your privacy rights have been violated

9. California Privacy Rights (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: The categories and specific pieces of personal information we collect, use, and share
• Right to Delete: Request deletion of personal information, subject to legal and operational exceptions
• Right to Opt-Out of Sale or Sharing: BMO Harris Bank does not sell personal information. We do not share personal information for cross-context behavioral advertising without consent
• Right to Non-Discrimination: BMO Harris Bank will not discriminate against you for exercising your CCPA/CPRA rights
• Right to Correct: Request correction of inaccurate personal information

To exercise your California privacy rights, contact BMO Harris Bank at 1-888-340-2265 or write to us at 111 W. Monroe Street, Chicago, IL 60603, Attn: Privacy Officer.

10. Children's Privacy

BMO Harris Bank online banking services and websites are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child under 13 has provided us with personal information, please contact us immediately at the address below and we will delete such information promptly.

For customers under 18 who hold BMO Harris Bank youth or student accounts, parental or guardian consent is required, and we apply enhanced privacy protections to such accounts.

11. Data Retention

BMO Harris Bank retains your personal and financial information for as long as necessary to fulfill the purposes described in this Privacy Policy and to comply with legal and regulatory obligations. Specific retention periods include:

• Active account information: Duration of account plus 7 years after closure (federal banking requirements)
• Loan and mortgage records: 7 years after final payment or account closure
• BMO Harris bank login and activity logs: 5 years for fraud prevention and compliance purposes
• Marketing preference records: Until you withdraw consent, plus 3 years
• CCTV recordings at branch locations: Up to 90 days unless required for investigation

12. Changes to This Privacy Policy

BMO Harris Bank may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website, sending a notice via BMO Harris online banking, or notifying you by email.

Your continued use of BMO Harris Bank services or BMO Harris bank login after any change constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

13. Contact Us — Privacy Inquiries

For questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information by BMO Harris Bank, please contact:

• Mail: BMO Harris Bank N.A. — Privacy Officer, 111 W. Monroe Street, Chicago, IL 60603
• Phone: 1-888-340-2265 (Mon–Fri 7am–10pm CT, Sat–Sun 8am–8pm CT)
• Online: Via the secure message center in BMO Harris online banking after completing BMO Harris bank login

For issues related to identity theft or unauthorized account access, please call our 24/7 Fraud Hotline immediately at 1-800-680-6888.