Vanguard 403(b) Services Program Privacy Policy (Vanguard)


Click here to view our Privacy notice for California residents.


Our commitment to our customers 

Under the Vanguard 403(b) Services Program, The Vanguard Group, Inc. ("Vanguard") provides recordkeeping services to 403(b) retirement plans through an arrangement with Newport Group, Inc. Newport Trust Company ("Newport Trust"), a subsidiary of Newport Group, Inc. that is not affiliated with Vanguard, provides custodial services to those same 403(b) retirement plans. Vanguard and Newport Trust both understand the importance of safeguarding their customers’ financial assets and protecting their personal and financial information. This privacy policy is provided by Vanguard, on our own behalf and that of our service providers (collectively, "Vanguard" or "we"), and describes how we collect, use, share, and protect customers’ information. Newport Trust provides a separate policy that describes how it collects, uses, shares, and protects its customers’ information through the Vanguard 403(b) Services Program. Newport Trust’s privacy policy can be located here.

You trust Vanguard to safeguard your assets and protect your personal, financial, and business information. We recognize that your relationship with Vanguard is based on trust, and that you expect us to act responsibly and in your best interests. When we share current, prospective, or former client or participant information—whether it is personal information or the fact that an organization is, was, or may become a Vanguard client—we do so under the circumstances described in this policy.

We use the personal and other information provided to us primarily to respond to inquiries or requests; to maintain and protect accounts; to process transactions; to provide education related to retirement plans and financial goals; to fulfill our legal obligations; for research and analytical purposes; and to develop and provide the financial products and services that we offer or sponsor.

The personal information we collect

Vanguard may collect client, plan, and participant information from the client, the participant, their representatives, and third-party service suppliers not affiliated with Vanguard (service suppliers). For example, we may collect information about participants when they request information or materials from Vanguard and when they enter information into an online application or enrollment process.

For representatives of clients or prospective clients, we may receive information such as contact name, address, phone number, email address, and title, as well as information about the organization, its business, and the retirement plan(s) that the organization sponsors.

To provide 403(b) retirement plan recordkeeping and administration services, information we may collect about participants includes, among other things, name, address, Social Security or taxpayer identification number, employee identification number, phone number, email address, date of birth, account balances, investment activity, and accounts at other institutions.

We may combine the information collected on our websites with information collected from or about our clients or participants in other contexts. This may include information collected online, such as on our websites or through our email exchanges, from publicly available sources, or from offline sources, such as when clients or participants establish an account with us or call customer service. We will treat such combined information in accordance with this policy. If clients or participants do not wish to provide information to Vanguard, we may be unable to provide certain products or services to them. 

How we handle personal information 

We do not share personally identifying information about our investors or prospective investors with unaffiliated third parties for use in marketing their own products and services. We may share personal information when needed to complete requested transactions or to raise awareness about the financial products and services that we offer. Here are the details:

  • To respond to inquiries, complete transactions, make account changes, and provide requested services, it may be necessary to provide identifying information about the client, plan, or participant to Vanguard’s affiliates or service suppliers, or to other authorized third parties that are not affiliated with Vanguard. For example, if the client or participant asks to transfer assets from another financial institution to Vanguard, we will need to provide certain information about the client, plan, and/or participant to that institution to complete the transaction.
  • To provide retirement plan education that may increase participants' chances of meeting their financial goals, or the goals of the plan, and to educate clients and participants about financial products and services that Vanguard offers or sponsors, to better understand our clients' needs, and to improve our product and service offerings, we may share client, plan, and/or participant information within the Vanguard family of affiliated companies, to the extent permitted by law.
  • At the direction of the plan sponsor, we will provide client, plan, and/or participant information to third parties such as service providers of the plan or the plan sponsor.
  • To comply with regulatory or legal requirements, we may provide client, plan, and/or participant information to regulatory bodies, taxing agencies, and law enforcement.
  • In certain instances, we contract with service suppliers to perform services for us. Where necessary, we will disclose information, including personally identifying information, that we have about clients, plans, and/or participants to these service suppliers. In all such cases, we provide the service supplier with personal information only as necessary to carry out its responsibilities as provided in its agreement with us, and only for that purpose. And we require these service suppliers to treat this information with the same high degree of confidentiality that we do.
  • To engage in research collaborations designed to enhance public understanding of workplace retirement plans and to encourage supportive public policies, we may share information with leading academic researchers or industry trade associations. Our research collaborations have included projects with The Wharton School of the University of Pennsylvania, Columbia University, and UCLA, among others. In all cases, the information we provide does not include any identifying information about clients, plans, or participants, such as participant names, addresses, or Social Security numbers.
  • Finally, we will release information about clients and participants if we are directed or authorized to do so by the client or participant, if we are compelled by law or legal process to do so, or in other legally limited circumstances (for example, to prevent fraud).

Cookies, web beacons, and online privacy 

Our concern for the privacy of our clients and participants naturally extends to those who use our 403(b) website, Our website uses some of the most secure forms of online communication available, including data encryption, transmission encryption, and user names and passwords. These technologies provide a high level of security and privacy when plan sponsors and participants access account information, initiate online transactions, or send secure messages. 

We use a variety of technologies, such as cookies, web beacons, and similar mechanisms, as described further below, to collect information that helps us understand how our site is used. Specifically, when clients or participants visit our website, we or our service suppliers may automatically collect a variety of technical and navigational information via these technologies, including, as applicable: computer or device type; operating system version; browser type and version; user agent string; internet connection type; mobile network provider; date and time of visit; time since last visit; pages viewed; links clicked; searches conducted; the internet protocol (IP) address used to access our site; the user’s general geographic location (e.g., city, state, or zip code); and the website visited before our site. We also may use similar tracking technologies in emails that we or our service suppliers send to clients and participants, as further described below. This information may be used, for example, to alert users of software compatibility issues, to resolve technical or service problems, and for security purposes. We also analyze this information, with the assistance of our service suppliers, to improve our web design and functionality, to enhance our ability to serve our clients and participants and their accounts, and to tailor our communications to clients and participants regarding our products and services. 

Cookies: A cookie is a small file of letters and numbers that is stored on the user’s computer or other device when visiting a website. Cookies contain information that is transferred to or read on the device and allow websites to recognize devices and store certain information, such as user preferences. Cookies are used to distinguish a user from other users of our website. This helps us to provide a useful experience when users browse and also allows us to improve our site. We and our service suppliers use session cookies, which link a user’s actions during a particular online session and expire at the end of that session, as well as persistent cookies, which remain on the user’s device and allow us to remember user actions or preferences across multiple browser sessions. 

If you are concerned about having cookies on your computer or other device, you can set your web browser to refuse all cookies or to indicate when a cookie is being set, allowing you to decide whether to accept it. You can also delete cookies from your device. The help feature on most web browsers will tell you how to prevent your browser from accepting new cookies, how to receive notice when a new cookie is set, and how to disable cookies altogether. However, if you choose to block or delete cookies, certain features of our website may not operate correctly. For further information about deleting or blocking cookies, please visit Information about how to opt out of the use of cookies for certain purposes is discussed below in the section titled "Website analytics."

Web beacons: Our website and the emails that clients and participants receive from Vanguard use an application known as a web beacon (also known as a pixel tag or clear gif). A web beacon is an electronic file that usually consists of a single-pixel image, embedded in a webpage or an email to measure usage and activity. In some cases, a web beacon triggers the placement of a persistent cookie on a user’s device. offers customized features that require our use of cookies and web beacons. Certain sections of our website require cookies to be enabled to support site performance and provide enhanced authentication. For example, cookies enable us to personalize and improve the user experience and help enhance site navigation. Cookies also help us to understand how people use our site so that we can improve site structure, functionality, and content. Web beacons allow us, directly or through our service suppliers, to collect information used for website analytics, such as how many users have visited particular pages or downloaded documents, or how frequently users search for a particular term. However, our use of these cookies and web beacons is limited. We do not use them to view or collect data in cookies or similar data files created by other websites. We will not share the information in these data files or give others access to it — except to help us better serve our clients’ and participants’ investment needs and as described in this privacy policy. 

We and our service suppliers use web beacons and cookies to determine whether and when clients and participants receive and open our emails; these beacons and cookies may also capture information such as the type of device, operating system, email program, and web browser used to view the email, the IP address from which the email was opened, and whether the recipient clicked any links in the email. These technologies enable us to gauge the effectiveness, relevance, and value of our email communications.

With regard to clients and participants who have registered for secure online access to their Vanguard accounts, we may be able to combine the information we collect about website usage during a secure (logged-on) session with other information we know about the client or participant, such as any account transactions conducted during the web session. We can also identify a user’s computer or device on each visit to our website, even if the user does not log on, and link information about that visit to that user. We may use this combined information to assess the appeal and usefulness of the information and tools offered on our website, as well as to identify Vanguard products and services that may be of interest to our clients and participants. 

Our website includes links to third-party sites or information that we think may be of interest to our clients and participants. When users click on these links and leave our website, our site’s terms and conditions of use and privacy policy no longer apply. Users are responsible for complying with the third-party site’s terms of use and understanding its privacy policy, both of which you should be reviewed carefully. 

Website analyticsWe engage service suppliers to collect the information discussed above to engage in analysis, auditing, research, and reporting. These service suppliers may set and access cookies on our clients’ and participants’ computers or other devices and may use web beacons to collect information about activity on our website. In particular, our site uses  Google Analytics to help collect and analyze certain information for the purposes discussed above. The information generated about our clients’ and participants’ use of our website may be transmitted to and stored by Google Analytics on servers outside the user’s country of residence. Clients and participants may opt out of the use of cookies by Google Analytics  here

Although our website currently does not respond to "do not track" browser headers, users can limit tracking by taking the opt-out steps discussed above. 

How we safeguard information 

Within Vanguard, we restrict access to personal information to those Vanguard and service supplier employees who need to know the information in order to perform their jobs, such as servicing accounts, providing requested information, or notifying clients and participants of new products and services. To protect this information, we maintain physical, electronic, and procedural safeguards in accordance with applicable law and industry standards and practices, and we review and adjust these safeguards regularly in response to advances in technology. 

What you can do 

For the protection of client and participant information, please do not provide Vanguard account information, user names, or passwords to anyone. Please be aware that despite our best efforts, no information security measures can guarantee 100% security all of the time. If you become aware of any suspicious activity relating to your account or information, it is your responsibility to contact us immediately.

If you have any questions relating to this privacy policy or concerns about the way in which we have handled information about you, please send us an email at

We'll keep you informed 

This privacy policy is subject to change. You should review it periodically. If we make changes, we will update the "revised" date and post the revised policy on 

Revised January 2020