Effective January 1, 2020
This PRIVACY NOTICE FOR CALIFORNIA RESIDENTS supplements the information contained in the Privacy Statement of Maximus Inc. (collectively, “we,” “us,” or “our”) and applies solely to visitors, users, and others who reside in the State of California (“consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and other California privacy laws. Any terms defined in the CCPA have the same meaning when used in this notice. Maximus Inc. does not transfer personal information for consideration (“sell or sold”). Maximus Inc. may collect or transfer personal information from California residents. You provide this information voluntarily when you request information or communicate with us. You can find a list of the categories of information we collect in the “Information We Collect” section below. Please note that because this list is comprehensive, it may refer to types of information that we collect about people other than yourself.
Information We Collect
We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or device (“personal information”). In particular, we have collected the following categories of personal information from employees/applicants within the last twelve (12) months:
- Category A – Identifiers
Examples: Name, postal address, email address, phone number, or other similar identifiers.
- Category B - Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code §1798.80(e))
Examples: Name, address, education, employment. Some personal information included in this category may overlap with other categories.
- Category C – Protected classification characteristics under California or federal law
Examples: Age, marital status, medical condition.
- Category D – Commercial information
Examples: Products or services purchased, obtained, or considered.
- Category I – Professional or employment-related information
Examples: Current or past job history or performance evaluations.
Personal information does not include:
- Publicly available information from government records.
- De-identified or aggregated consumer information.
- Information excluded from the CCPA's scope, like:
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and
- Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.
We obtain the categories of personal information listed above from the following categories of sources:
- Website/Mobile App Activity/Social Media. For example, information we receive directly and indirectly from activity on our website https://maximus.com/, including submissions through our website to request information, through the contact us form, or website usage details collected automatically.
- Directly from a California resident or the individual’s representative(s)
- Information from our Affiliates and subsidiaries
- Information from third parties that interact with us in connection with the service we perform.
- Information from Corporate Clients about individuals associated with the Clients (e.g., an employee or board member)
Use of Personal Information
We may use or disclose the personal information we collect for one or more of the following business purposes:
- To fulfill or meet the reason for which the information is provided. For example, if you provide us with personal information in order for us to provide investor relations materials, we will use that information to prepare the materials and provide them to you.
- To provide you with information, products, or services that you request from us.
- To provide you with email alerts, event registrations, and other notices concerning our products or services, or events or news, that may be of interest to you.
- To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
- To improve our website and present its contents to you.
- For testing, research, analysis, and product development.
- As necessary or appropriate to protect the rights, property, or safety of our clients, ourselves, and others.
- To respond to law enforcement requests and, as required by applicable law, court order, or governmental regulations.
- As described to you when collecting your personal information or as otherwise set forth in the CCPA.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.
We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.
Sharing Personal Information
We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter into a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:
Category A: Identifiers.
Category B: California Customer Records personal information categories.
Category C: Protected classification characteristics under California or federal law.
Category D: Commercial Information.
Category I: Professional or employment-related information.
We disclose your personal information for a business purpose to the following categories of third parties:
- Our affiliates and subsidiaries.
- Vendors and Service Providers.
- Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.
- Government Agencies as required by laws and regulations.
Sale of Personal Information
In the preceding twelve (12) months, we have not sold personal information subject to the CCPA, including personal information of minors under the age of 16. For purposes of this Disclosure, “sold” means the disclosure of personal information to a third party for monetary or other valuable consideration.
Rights and Choices under the CCPA
If you are a California resident, you have specific rights regarding your personal information. This section describes your CCPA rights and explains how to exercise those rights.
- Request we disclose to you free of charge the following information covering the 12 months preceding your request:
- the categories of Personal Information about you that we collected
- the categories of sources from which the Personal Information was collected;
- the purpose for collecting Personal Information about you;
- the categories of third parties to whom we disclosed Personal Information about you and the categories of Personal
- Information that was disclosed (if applicable) and the purpose for disclosing the Personal Information about you; and
- the specific pieces of Personal Information we collected about you;
- Request we delete Personal Information we collected from you unless the CCPA recognizes an exception; and
- Be free from unlawful discrimination for exercising your rights under the CCPA
We will acknowledge receipt of your request and advise you how long we expect it will take to respond if we are able to verify your identity. Requests for specific pieces of Personal Information will require additional information to verify your identity. If you submit a request on behalf of another person, we may require proof of authorization and verification of identity directly from the person for whom you are submitting a request.
In some instances, we may not be able to honor your request. For example, we will not honor your request if we cannot verify your identity or if we cannot verify that you have the authority to make a request on behalf of another individual. Additionally, we will not honor your request where an exception applies, such as where the disclosure of Personal Information would adversely affect the rights and freedoms of another consumer or where the Personal Information that we maintain about you is not subject to the CCPA’s access or deletion rights.
We will advise you in our response if we are not able to honor your request. We will not provide social security numbers, driver’s license numbers or government-issued identification numbers, financial account numbers, health care or medical identification numbers, account passwords or security questions and answers, or any specific pieces of information if the disclosure presents the possibility of unauthorized access that could result in identity theft or fraud or unreasonable risk to data or systems and network security.
We will work to process all verified requests within 45 days pursuant to the CCPA. If we need an extension for up to an additional 45 days in order to process your request, we will provide you with an explanation for the delay.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
How to Exercise your Rights
If you are a California resident, you may submit a request by:
Only you or a person registered with the California Secretary of State that you authorize to act on your behalf may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or services.
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits or imposing penalties.
- Provide you a different level or quality of goods or services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
Your California Privacy Rights
If you are a California resident, California law may provide you with additional rights in addition to CCPA regarding our use of your personal information. To learn more about your California privacy rights, visit https://oag.ca.gov/privacy/privacy-laws.
Changes to Our Privacy Notice
We reserve the right to amend this privacy notice at our discretion and at any time. When we make changes to this privacy notice, we will notify you by email or through a notice on our website homepage.
If you have any questions or comments about this notice, our Privacy Statement, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at
Revised: June 21, 2021