NYS Wallet Privacy Policy

Privacy Policy for New York State (NYS) Wallet Program 

 

The New York State (“NYS”) Wallet application provides a central location on a mobile computing device for holding multiple digital credentials that an individual can use for credential storage, presentation, and verification. The information you provide to obtain a NYS Wallet application will not be used by New York State for any other purpose. 

The use of the NYS Wallet application is completely voluntary, and it can be downloaded for free on applicable devices. 

 

Data 

When you apply for a digital credential to download and store in your NYS Wallet application, data is provided by you as the user according to the terms of the authorization to disclose, privacy policy, or any other policies or terms of the NYS agency issuing the credential, if you choose to provide it. This may include your First Name, Last Name, Date of Birth, and potentially other personal information. The data you provide may also be supplemented by data provided by the NYS agency issuing the digital credential. 

You may delete the NYS Wallet application and any associated credential at any time. 

 

How Data is Used for NYS Wallet 

Anonymous usage data and metrics related to NYS Wallet application adoption and usage are also collected and shared with New York State, including number of app downloads and deletions. The app developers or the State cannot identify any specific user that has downloaded or deleted the NYS Wallet application. The app is downloadable from the applicable app store which may be linked to an individual’s mobile account. New York State cannot identify any individual that downloads the NYS Wallet application onto their mobile device. 

 

The Camera 

The NYS Wallet application requires access to your mobile device camera to scan the QR codes associated with NYS agency-issued credentials stored and presented from your NYS Wallet. We cannot access your camera without permission. 

 

The App and Location Tracking 

The NYS Wallet application does not use location services on your mobile device. 

 

Local Notifications Feature 

If you choose to activate this feature of the NYS Wallet app, you can be provided with updates such as expiration reminders for your individual agency credentials contained within the NYS Wallet app. 

 

Information Security 

Data you provide is maintained in a secure manner and will not be used for sales or marketing purposes or shared with a third party. The NYS Wallet application complies with NYS Information Security policies and procedures located at https://its.ny.gov/ciso/policies/security

 

Changes to our Privacy Policy 

New York State may update this Privacy Policy from time to time to reflect changes to our data governance practices. The revised Privacy Policy will be posted here with an updated revision date. We encourage you to check back periodically for any changes or updates. 

 

Resources 

The full Data and Privacy Policy can be accessed directly within the NYS Wallet application settings screen and at: https://yi.nyswallet.ny.gov/privacy. 

 

 

Privacy Policy for New York State (NYS) Excelsior Pass Program


The New York State (“NYS”) Excelsior Pass Program provides the Excelsior Pass Plus credential, which can help demonstrate status related to COVID-19. The NYS Excelsior Pass Program is a voluntary program that can be utilized with or without the NYS Wallet app. The purpose of the State's Excelsior Pass Program and NYS Wallet app is to assist New York or other jurisdictions in responding to the COVID-19 pandemic. The information you provide will not be used by the State for any other purpose.

 

  • For COVID-19, the Excelsior Pass Plus will allow you to validate your vaccination status or current negative test result and demonstrate this information to third parties. For the Excelsior Pass Program to provide validation to third parties, you must verify your identity in the Excelsior Pass Program website (“epass.ny.gov”) by providing information such as your First Name, Last Name, Date of Birth, Telephone Number, and Zip Code and by answering New York's questions related to your vaccination or testing history.

 

  • The Excelsior Pass Program website (“epass.ny.gov”) allows you to create a QR code-enabled credential that verifies you meet the criteria established by New York State Department of Health (“NYSDOH”) related to vaccination or a current negative test result for COVID-19 or can validate your vaccine dosage and date(s) similar to your paper vaccination card. The Excelsior Pass Plus can then be stored in the NYS Wallet app, or alternatively printed or stored digitally without using the NYS Wallet app.

 

  • When creating your Excelsior Pass Plus, based on the information you provide, and with your express consent, epass.ny.gov reaches out to the NYS databases that house vaccination information and test results for COVID-19 and receives back from NYS the information necessary to create the requested Pass Plus. The epass.ny.gov website receives back from NYS information about your specific dosages, including type of vaccine and dates of administration and/or COVID-19 negative test details. You can then choose to load your Excelsior Pass Plus into the NYS Wallet app, store it digitally, or print it out.

 

  • The Excelsior Pass Plus includes specific vaccination information, including date and dosage information similar to your paper vaccination card. COVID-19 negative test details are also available through Excelsior Pass Plus. The Excelsior Pass Plus may be used with the NYS Scanner app or compatible third party apps. It may also be accepted by certain jurisdictions outside of NYS or for outbound travel from NYS as proof of vaccination or negative test.

 

  • It is always your choice to whom you present your Excelsior Pass Plus for scanning. When you present your Pass Plus to be scanned by a party using the NYS Scanner app, that interaction is governed by this policy; however, should you choose to present your Pass Plus for scanning by a third party app or jurisdiction outside of NYS, you are subject to that third party or jurisdiction’s data collection and privacy requirements. NYS makes no representations or warranties about those interactions or about the privacy practices employed by third parties or other jurisdictions with whom you choose to share your Excelsior Pass Plus. When a jurisdiction, business, or venue scans your Excelsior Pass Plus using the NYS Scanner app or similar digital credential scanning application, it can validate your vaccination status or negative test result. Your personal health information or records are not shared with anyone, provided that you may voluntarily choose to disclose information or display your Excelsior Pass Plus to another party, thereby indicating that you are either vaccinated against COVID-19 or received a recent negative COVID-19 test. To validate your Excelsior Pass Plus, a third party, using the NYS Scanner app or similar digital credential scanning application, scans the QR code on your Excelsior Pass Plus and receives from it the following information:
    • First Name
    • Last Name
    • Date of Birth
    • Excelsior Pass Plus status (valid, invalid, expired)
    • Excelsior Pass Plus type (vaccination, PCR, antigen)
    • Vaccination dosage and dates or negative test

 

  • The Excelsior Pass Program and NYS Wallet app do not indicate whether you or others may be positive for or have been exposed to COVID-19.

 

  • When you use an Excelsior Pass Plus for outbound travel from NYS, you may be asked by the jurisdiction you are visiting to also provide your passport number or other travel document number, as further described in the "Authorization to Disclose" section associated with this credential. An Excelsior Pass Plus, may not, by itself, be accepted by all jurisdictions outside of NYS as valid proof of vaccination status or negative test.


The use of the NYS Wallet app is completely voluntary, and it can be downloaded for free on applicable devices.

 

Data

  1. When you retrieve an Excelsior Pass Plus from epass.ny.gov, data is provided by you as the user under the Excelsior Pass Plus Authorization to Disclose terms, if you choose to provide it. This includes your First Name, Last Name, Date of Birth, Telephone Number, and Zip Code, as well as answers to questions associated with your COVID-19 vaccination or testing history.
  2. The data you provide is supplemented by data provided by the NYSDOH (for example, confirmation of vaccination status, current negative test result, or dosage information).

 

By choosing to create an Excelsior Pass or Excelsior Pass Plus under the Excelsior Pass Program, you agree to provide personal information about yourself which allows epass.ny.gov to access NYSDOH information to generate your Pass.

 

You can delete your personal information at any time from the NYS Wallet app by selecting “Remove Your Pass” when viewing an Excelsior Pass or Excelsior Pass Plus.

 

How Data is Used for the Excelsior Pass Program
Anonymous usage data and metrics related to NYS Wallet app adoption and usage are also collected and shared with NYS, including number of app downloads and deletions. The app developers or NYS cannot identify any specific user that has downloaded or deleted the app. The app is downloadable from the applicable app store which may be linked to an individual’s mobile account. NYS cannot identify any individual that downloads the app onto their device.

 

The Camera
The NYS Wallet app requires access to your camera to scan the QR code from your Excelsior Pass or Excelsior Pass Plus in order to load it into the NYS Wallet app. We cannot access your camera without permission.

 

The App and Location Tracking
The NYS Wallet app does not use location services on your mobile device.

 

Local Notifications Feature
If you choose to activate this feature of the NYS Wallet app, you can be provided with updates such as expiration reminders for your Excelsior Pass or Excelsior Pass Plus.

 

Information Security
Data you provide is maintained in a secure manner and will not be used for sales or marketing purposes or shared with a third party. The NYS Wallet app complies with NYS Information Security policies and procedures located at https://its.ny.gov/ciso/policies/security.

 

Changes to our Privacy Policy
NYS may update this Privacy Policy from time to time to reflect changes to our data governance practices. The revised Privacy Policy will be posted here with an updated revision date. We encourage you to check back periodically for any changes or updates.

 

Resources
The full Data and Privacy Policy can be accessed directly within the NYS Wallet app settings screen and at:  https://epass.ny.gov/privacy.