California Privacy Notice

Last Updated: April 2023

If you are a resident of California, the processing of your Personal Information may be subject to the California Privacy Rights Act (“CPRA”). The CPRA provides California residents with certain rights.

This California Privacy Notice (“CA Notice”) supplements our general Privacy Statement and applies to the Personal Information we collect about California residents, unless a more specific privacy notice applies. For example, if you are a Leidos employee, Leidos’ Global Employee Privacy Notice will apply to our processing of Personal Information collected in connection with your employment. Additionally, our Recruitment Privacy Notice applies with respect to any Personal Information we collect in connection with recruitment and hiring activities.

Personal Information We Collect about California Residents

Leidos, Inc. (“we,” “us,” or “our”) may collect the following types of Personal Information about California residents. For each category of Personal Information (in bold), we have provided a few examples of the types of Personal Information we may collect. These examples are not an exhaustive list of the types of Personal Information we collect.

Contact Information – names, postal addresses, email addresses, and/or telephone numbers;
Online and Unique Identifiers – IP addresses, device IDs, and/or other similar identifiers;
Professional/Education Information – employer name, job titles, education history, employment history, and professional organization affiliations;
Online Activity – interactions with Leidos Sites or Apps or Leidos advertisements;
Communications – any Personal Information voluntarily provided to us; and
Sensitive Personal Information – information about health-related symptoms and conditions that you share with Leidos, information collected in connection with our efforts to maintain the health and safety of our employees and visitors to our facilities, and information about your race or ethnicity which we collect from job applicants for regulatory compliance purposes.

Sources of Personal Information We Collect about California Residents

We may collect Personal Information from the following sources:

information provided to us directly from California residents;
information we collect prior to or during visits to our facilities;
our affiliates and subsidiaries;
our customers, prime contractors, subcontractors, and other partners;
our advertising and marketing partners;
conference organizers;
our joint venture and strategic partners; and
publicly available sources.

Purposes for Which We Process Personal Information

We may process Personal Information for the following purposes:

to deliver marketing and advertising messages, or to otherwise communicate with you at your request;
to provide information or otherwise respond to requests for information, such as information about Leidos’ services, Leidos’ expertise in various areas or Leidos publications;
for legitimate business purposes, such as in connection with performance under a contract, bidding on a contract, or as otherwise necessary to meet contractual or legal obligations;
to conduct research, analytics, and development;
to identify and address bugs or system errors;
to provide for the security of our systems and facilities;
to protect our systems against malicious or unauthorized activity and to investigate any suspected malicious or unauthorized activity;
to protect the safety of our guests, employees, and visitors to our facilities, including possibly through contact tracing, temperature scanning or other methods of identifying and/or preventing the spread of infectious disease;
to conduct internal auditing;
to protect our property and enforce our rights;
to investigate reported adverse events involving a medical product or device sold or distributed by Leidos and submit such information to appropriate government agencies;
as authorized or required by law; and
for any other purpose stated when you provide your Personal Information to us or as described in this CA Notice.

Personal Information We Share about California Residents

The CPRA requires that we disclose the categories of Personal Information we have sold in the last year. Although we do not sell Personal Information for monetary compensation, we may share Personal Information with third parties in connection with our business operations, such as to market Leidos’ services or the expertise and skills of its workforce.

We share the following categories of Personal Information for our business purposes. For each category of Personal Information (in bold), we have provided a few examples of the types of Personal Information we may share in connection with our business operations. These examples are not an exhaustive list of the types of Personal Information we share. We may also update this list at any time if we decide to share additional categories of personal information.

Contact Information – names, email addresses, postal address, and telephone number;
Online and Unique Identifiers – We may share IP addresses, device identifiers, and similar identifiers;
Professional/Education Information – employer name, job titles, education history, employment history, and professional organization affiliations and
Communications – any Personal Information voluntarily provided to us.

We share these categories of Personal Information with third party partners and service providers for various reasons, such as: 1) to help us target advertising messages to potential or existing customers, both online and through direct marketing campaigns, 2) identify new business opportunities, 3) prepare and submit business proposals and bids, 4) contact potential new business partners and employees and 5) negotiate with potential business partners and potential customers. Our third party partners may include subcontractors, customers, prime contractors, consultants, universities, and other entities or individuals with whom we partner to provide solutions to our customers.

Right to Know What Personal Information We Process about You

If you live in California, you may have the right to request that we disclose to you certain information about our processing of your Personal Information during the last 12 months. You may request that we provide to you (1) the categories of personal information we collect about you, (2) the categories of sources from which we collected this information, (3) the business or commercial purpose for collecting, selling, or sharing your Personal Information, (4) the categories of third parties to whom we disclose your Personal Information, and (5) the specific pieces of Personal Information we collected about you. To exercise this right, submit a request.

Right to Delete Your Personal Information

If you live in California, you may have the right to request that we delete the Personal Information we have collected from you. To exercise this right, submit a request.

Please note, though, that the right to delete your Personal Information is not absolute. For example, we will not delete your Personal Information if we need to process it:

to provide you with a good or service you have requested;
to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activity;
to identify and repair errors that impair existing intended functionality;
to use it in a way which is reasonably aligned with your expectations based on your relationship with us;
to comply with one or more legal obligations;
to exercise rights provided for by law; and/or
for lawful internal purposes that are compatible with the context in which you provided your Personal Information to us.

We may also retain any Personal Information contained in archive or back-up systems until we recover or delete your Personal Information.

Right to Opt-Out of Sales

Although we do not sell Personal Information for monetary compensation, we may share Personal Information for purposes that could fall within the CPRA’s broad definition of a “sale.” Thus, if you are a California resident, you may have the right to ask us to not “sell” your Personal Information. To exercise this right, please review the sections in our general Privacy Statement about managing Cookies and interest-based advertising to learn how to opt-out of permitting third parties to collect information about your activities on our Sites or Apps. You can also submit a request.

Right to Correct Your Personal Information

California residents also have the right to ask that we correct any inaccurate Personal Information we maintain about you. If you submit a request to correct your Personal Information, we will review your request to determine if the Personal Information we maintain about you is accurate. If we determine that the Personal Information we maintain about you is inaccurate, we may correct it or delete it. To exercise this right, submit a request.

Right to Limit our Processing of Sensitive Personal Information

California residents also have a right to request that Leidos limit its processing of your Sensitive Personal Information. Sensitive Personal Information includes (1) certain government identification numbers, (2) financial account information, (3) precise geolocation information, (4) information about an individual’s racial or ethnic origin, (5) information about an individual’s religious or philosophic beliefs, (6) information about an individual’s union membership, (7) genetic or health information, (8) information about an individual’s sex life or sexuality.

If you submit a request to limit our processing of your Sensitive Personal Information, we will limit our use or disclosure of your Sensitive Personal Information to only those processing activities that are permitted by the CPRA. These processing activities may include (1) performing services at your request, (2) preventing, detecting, and investigating security incidents, (3) preventing and prosecuting malicious, deceptive, fraudulent, or illegal actions, (4) ensuring the physical safety of others, (5) to provide products and services and to upgrade or enhance those products and services or for other permitted business purposes, or (6) as otherwise permitted by the CPRA. To exercise this right, submit a request.

Right to Equal Treatment

If you exercise any of the rights provided to you under the CPRA, we will not treat you any less favorably as a result of your request. We support your desire to exercise these rights, and we will not charge you different fees or provide you with a different level of service if you do.

Exercising Your Rights

To exercise your rights under the CPRA, submit a request. You will be asked to identify your relationship to Leidos and the right(s) you would like to exercise. You will also be asked to provide the information identified in our Privacy Rights Request form, which we will use to verify your identity by matching it to information we have previously collected. Upon receiving your request, we may communicate with you to obtain additional information that will help us process your request.

You may also exercise your rights by calling us toll-free at 1-888-914-9661. When prompted, you will need to enter the following PIN: 002876. Please leave a message with your name, relationship to Leidos, the right you wish to exercise, and your email address. If we need to request additional information to process your request, we will contact you using your email address.

Using an Authorized Agent

You have the right to use an authorized agent to exercise your rights under the CPRA on your behalf. To use an authorized agent, your agent will be required to provide evidence that you have granted him or her power of attorney. If you have not granted your authorized agent power of attorney, your authorized agent must provide us with a written and signed statement in which you authorize your agent to act on your behalf, and your authorized agent must verify his or her identity. You will also be required to directly confirm with us that you have authorized your agent to submit the request on your behalf.

Personal Information of Children

We do not knowingly collect or process Personal Information of children under 16 years old. We also do not knowingly sell Personal Information relating to children under 16 years old. If you believe that we have collected or sold Personal Information about a child under 16 years old, please contact us at [email protected] to notify us of such processing.

Other California Rights

Leidos may also share Personal Information with its affiliates so that they can send direct marketing communications. If you do not wish to receive these communications, please let us know by email at [email protected].

Questions and Complaints

If you have any questions, complaints, or wish to send us comments about this Privacy Notice, please send an e-mail to [email protected]. We will investigate your complaint and will respond as soon as possible.