Back to top

California Privacy Notice

Last Updated: January 2025

If you are a resident of California, the processing of your Personal Information may be subject to the California Privacy Rights Act (“CPRA”). The CPRA provides California residents with certain rights. 

This California Privacy Notice (“CA Notice”) supplements our general Privacy Statement and applies to the Personal Information that Leidos, Inc. (“we,” “us,” or “our”) may collect about California residents, unless a more specific privacy notice applies. For example, if you are a Leidos employee, Leidos’ Global Employee Privacy Notice will apply to our processing of Personal Information collected in connection with your employment. Additionally, our Recruitment Privacy Notice applies with respect to any Personal Information we collect in connection with recruitment and hiring activities.

Personal Information We Collect about California Residents

California law requires we provide disclosures to you about what Personal Information we collect by reference to the enumerated categories of Personal Information set forth within California law. To address this obligation, we have identified the relevant enumerated categories for the Personal Information described in the “What Categories of Personal Information Are Collected via Leidos Sites and Apps” section of our Privacy Statement.

For each category of Personal Information (in bold), we have provided a few examples of the types of Personal Information we may collect. These examples are not an exhaustive list of the types of Personal Information we collect in each category.

  • Identifiers – names, postal addresses, email addresses, and/or telephone numbers, preferred method of contact, and other Personal Information voluntarily provided to us;
  • Commercial Information – information about the services provided by health care providers who work with our vocational or medical case management or medical evaluation businesses, such as office location, specialty, and other information that is necessary to conducting a business relationship;
  • Professional/Employment Information – employer name, job titles, employment history, professional licensing and certification information, and professional organization affiliations;
  • Education information – such as education history;
  • Internet / network information – IP addresses, device IDs, and/or other similar identifiers, and information about interactions with Leidos Sites or Apps or Leidos advertisements;
  • Geolocation data, such as information about your non-precise physical location collected from geolocation features on your device, including your IP address;
  • Inferences – such as inferences derived from Analytics Data as described in the “Data Collected for Analytics, Marketing and Advertising Purposes” section of our Privacy Statement;
  • Sensitive Personal Information – information about health-related symptoms and conditions that you share with Leidos, information collected in connection with our efforts to maintain the health and safety of our employees and visitors to our facilities, and information about your race or ethnicity which we collect from job applicants for regulatory compliance purposes. We do not sell Sensitive Personal Information, and we do not process or otherwise share sensitive Personal Information for the purpose of targeted advertising. However, you may be able to limit our processing of Sensitive Personal Information as described below.
  • We may at times receive, or process Personal Information to create, deidentified information that can no longer reasonably be used to infer information about, or otherwise be linked to, a particular individual or household. Where we maintain deidentified information, we will maintain and use the information in deidentified form and not attempt to reidentify the information except as required or permitted by law.

 

Sources of Personal Information We Collect about California Residents

We may collect Personal Information from the following sources:

  • information provided to us directly from California residents;
  • information we collect prior to or during visits to our facilities;
  • our affiliates and subsidiaries;
  • our customers, prime contractors, subcontractors, and other partners;
  • our advertising and marketing partners;
  • conference organizers;
  • our joint venture and strategic partners; and
  • publicly available sources.

 

Purposes for Which We Process Personal Information

We may process Personal Information for the following business purposes, as further described in our Privacy Statement:

  • to deliver marketing and advertising messages, or to otherwise communicate with you at your request;
  • to provide information or otherwise respond to requests for information, such as information about Leidos’ services, Leidos’ expertise in various areas or Leidos publications;
  • for legitimate business purposes, such as in connection with performance under a contract, bidding on a contract, or as otherwise necessary to meet contractual or legal obligations;
  • to conduct research, analytics, and development;
  • to identify and address bugs or system errors;
  • to provide for the security of our systems and facilities;
  • to protect our systems against malicious or unauthorized activity and to investigate any suspected malicious or unauthorized activity;
  • to protect the safety of our guests, employees, and visitors to our facilities, including possibly through contact tracing, temperature scanning or other methods of identifying and/or preventing the spread of infectious disease;
  • to conduct internal auditing;
  • to protect our property and enforce our rights;
  • to investigate reported adverse events involving a medical product or device sold or distributed by Leidos and submit such information to appropriate government agencies;
  • as authorized or required by law; and
  • for any other purpose stated when you provide your Personal Information to us or as described in this CA Notice.

 

Personal Information We Share about California Residents

The CPRA requires that we disclose the categories of Personal Information we have sold in the last year. Although we do not sell Personal Information for direct monetary compensation, we permit third parties to collect Internet / Network Information and related Inferences from our Sites and Apps (as defined in our general Privacy Statement). These data processing activities qualify as the “sale” of Personal Information or the sharing or processing of Personal Information for the purpose of displaying advertisements that are selected based on Personal Information obtained or inferred over time from an individual’s activities across businesses or distinctly-branded websites, applications, or other services (otherwise known as “targeted advertising” or “cross-context behavioral advertising”) under the CPRA:

In addition, we may disclose each of the categories of Personal Information described in the “Personal Information We Collect about California Residents” section above to third parties in connection with our business operations, such as to market Leidos’ services or the expertise and skills of its workforce.

For example, we share these categories of Personal Information with third party partners and service providers for various reasons, such as: 1) to help us target advertising messages to potential or existing customers, both online and through direct marketing campaigns, 2) to identify new business opportunities, 3) to prepare and submit business proposals and bids, 4) to contact potential new business partners and employees;  and 5) to negotiate with potential business partners and potential customers. Our third party partners may include subcontractors, customers, prime contractors, consultants, universities, and other entities or individuals with whom we partner to provide solutions to our customers.

For more information about how we disclose Personal Information, please refer to the “Disclosure of Personal Information” section of our Privacy Statement.

 

Right to Know What Personal Information We Process about You

If you live in California, you may have the right to request that we disclose to you certain information about our processing of your Personal Information during the last 12 months. You may request that we provide to you 1) the categories of personal information we collect about you, 2) the categories of sources from which we collected this information, 3) the business or commercial purpose for collecting, selling, or sharing your Personal Information, 4) the categories of third parties to whom we disclose your Personal Information, and 5) the specific pieces of Personal Information we collected about you. To exercise this right, submit a request.

 

Right to Delete Your Personal Information

If you live in California, you may have the right to request that we delete the Personal Information we have collected from you. To exercise this right, submit a request.

Please note, though, that the right to delete your Personal Information is not absolute. For example, we will not delete your Personal Information if we need to process it:

  • to provide you with a good or service you have requested;
  • to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activity;
  • to identify and repair errors that impair existing intended functionality;
  • to use it in a way which is reasonably aligned with your expectations based on your relationship with us;
  • to comply with one or more legal obligations;
  • to exercise rights provided for by law; and/or
  • for lawful internal purposes that are compatible with the context in which you provided your Personal Information to us.

We may also retain any Personal Information contained in archive or back-up systems until we recover or delete your Personal Information.

Right to Opt-Out of Sales

If you are a California resident, you may have the right to ask us to not “sell” your Personal Information and the right to opt out of interest-based advertising. To exercise this right, please review the sections in our general Privacy Statement about managing Cookies and interest-based advertising to learn how to opt-out of permitting third parties to collect information about your activities on our Sites or Apps. You can also submit a request.

If you are visiting one of our Sites and Apps with the Global Privacy Control enabled, any cookies that constitute sales or are used for targeted advertising should already be turned off automatically in our cookie preference manager. Please note this opt-out tool is website, device, and browser specific, so you will need to change your preferences on each device and browser you use to interact with the specific website you are visiting. In addition, you can also opt-out of cookie-based sales by businesses that participate in the Digital Advertising Alliance’s CCPA Opt-Out Tool by visiting https://www.privacyrights.info. Lastly, you may follow the other steps set forth in “Your Choices” section of our Privacy Statement to further exercise control over automatic data collection technologies.

 

Right to Correct Your Personal Information

California residents also have the right to ask that we correct any inaccurate Personal Information we maintain about you. If you submit a request to correct your Personal Information, we will review your request to determine if the Personal Information we maintain about you is accurate. If we determine that the Personal Information we maintain about you is inaccurate, we may correct it or delete it. To exercise this right, submit a request.

 

Right to Limit our Processing of Sensitive Personal Information

California residents also have a right to request that Leidos limit processing of Sensitive Personal Information. Sensitive Personal Information includes 1) certain government identification numbers, 2) financial account information, 3) precise geolocation information, 4) information about an individual’s racial or ethnic origin, 5) information about an individual’s religious or philosophic beliefs, 6) information about an individual’s union membership, 7) genetic or health information, and 8) information about an individual’s sex life or sexuality.

If you submit a request to limit our processing of your Sensitive Personal Information, we will limit our use or disclosure of your Sensitive Personal Information to only those processing activities that are permitted by the CPRA. These processing activities may include 1) performing services at your request, 2) preventing, detecting, and investigating security incidents, 3) preventing and prosecuting malicious, deceptive, fraudulent, or illegal actions, 4) ensuring the physical safety of others, 5) providing products and services and upgrading or enhancing those products and services or for other permitted business purposes, or 6) as otherwise permitted by the CPRA. To exercise this right, submit a request.

 

Right to Equal Treatment

If you exercise any of the rights provided to you under the CPRA, we will not treat you any less favorably as a result of your request. We support your desire to exercise these rights and we will not provide you with a different level of service if you do.

 

Exercising Your Rights

To exercise your rights under the CPRA, submit a request. You will be asked to identify your relationship to Leidos and the right(s) you would like to exercise. You will also be asked to provide the information identified in our Privacy Rights Request form, which we will use to verify your identity and California as your state of residence by matching it to information we have previously collected. Upon receiving your request, we may communicate with you to obtain additional information that will help us process your request.

You may also exercise your rights by calling us toll-free at 1-888-914-9661. When prompted, you will need to enter the following PIN: 002876. Please leave a message with your name, relationship to Leidos, the right you wish to exercise, and your email address. If we need to request additional information to process your request, we will contact you using your email address.

 

Using an Authorized Agent

You have the right to use an authorized agent to exercise your rights under the CPRA on your behalf. To use an authorized agent, your agent will be required to provide evidence that you have granted him or her power of attorney. If you have not granted your authorized agent power of attorney, your authorized agent must provide us with a written and signed statement in which you authorize your agent to act on your behalf, and your authorized agent must verify his or her identity. You will also be required to directly confirm with us that you have authorized your agent to submit the request on your behalf.

 

Personal Information of Children

We do not knowingly collect or process Personal Information of children under 16 years old. We also do not knowingly sell Personal Information relating to children under 16 years old. If you believe that we have collected or sold Personal Information about a child under 16 years old, please contact us at [email protected] to notify us of such processing.

 

Other California Rights

Leidos may also share Personal Information with its affiliates so that they can send direct marketing communications. If you do not wish to receive these communications, please let us know by email at [email protected].

 

Questions and Complaints

If you have any questions, complaints, or wish to send us comments about this Privacy Notice, please send an e-mail to [email protected]. We will investigate your complaint and will respond as soon as possible.