Symantec Advanced Threat Protection Platform with
Network and Endpoint Privacy Notice
Effective January 11, 2016
This Notice is designed to help You understand what information we collect or process from You and what we do with this information when You use Symantec Advanced Threat Protection Platform with
Network and Endpoint.
This Privacy Notice applies to your use of the Symantec Advanced Threat Protection Platform with
Network and Endpoint (“ATP”). To view the Complete Online Privacy Statement that applies to Your use of Symantec websites, please click here .
ATP collects from Your environment and automatically transmits to Symantec data, which may include, without limitation:
 All information collected by Symantec Endpoint Protection ;
 Administrator contact information, email address and portal password;
 Software configuration, product details, installation status;
 System and content update information;
 License file, name, version, language and status, license entitlement information, license ID and license usage;
 Device name, Machine Name, host name type, OS version, language, location, browser type and version, IP address and ID;
 File reputation metadata, including hash, URL and digital signature information;
 Android app (APK) reputation metadata including hash, package name and signer information;
 Network detection event information, including file samples sent for analysis and file analysis results;
 Log files of all network inspection events;
 Information on potential security risks and URLs of websites contacted deemed to be potentially fraudulent (such URLs could contain personal information that a potentially fraudulent website is attempting to obtain without Your permission), portable executable files and files with executable content that are identified as malware, and which may contain personal information, including information on the actions taken by such files at the time of installation;
 For files identified as potential malware: metadata including hash, file MIME type, IP address, as
 well as corresponding URL, HTTP headers, FTP domain/path, java applet tags and the full file;
For optional diagnostic features: Failure data including failure reports, crash dump information, log files, as well as the temporary files, configuration files and database tables related to the failure;
 For optional telemetry features:
 LiveUpdate error metadata (for further information see below);
 File scan error metadata;
 Conviction metadata including timestamp, machine ID, conviction threshold, severity rating, action taken, config version, host name, local and remote IP and ports, URL, Referrer URL, conviction classification, malicious file metadata, blacklist classification, malware signature information, confidence score and virus metadata;
 Device statistics on number queries, average and maximum latency, cancellations, convictions, clean findings, errors, total numbers of files scanned and files convicted, system health metadata and aggregated network failure and usage statistics;
 For optional event correlation features: relevant appliance IP and internal network IP ranges covered, malware conviction related metadata (as above), and metadata of emails blocked by Email
Security Service including envelop information and attachment conviction metadata;
 For optional support features: files you share with Support;
 Personal Information provided by You during configuration of the Service or any other subsequent service call.
Transmission of certain of the above Transmitted Information may be deactivated during and after installation by following the instructions in the documentation for ATP. Submission of the Transmitted Information is not required and You will be able to use ATP even if You do not submit the Transmitted Information to Symantec.
© Symantec - All rights reserved Page 1 of 3

Symantec Advanced Threat Protection Platform with
Network and Endpoint Privacy Notice
You may elect to request that Symantec delete files submitted for inspection by following the instructions in the documentation for ATP.
In addition, certain information listed above is only transmitted in the event You choose to do so and have enabled certain optional features of this product or related products such as Symantec Endpoint Protection
Management.
ATP utilizes the LiveUpdate functionality. For information about the LiveUpdate functionality, please refer to the LiveUpdate Privacy Notice .
ATP collects from Your environment and stores in Your environment, information, which may include, without limitation:
 Locally quarantined files
 Conviction metadata as per the above
The Stored Information is used to enable the functionality of ATP and will not be transmitted back to Symantec.
Transmitted Information will be used:
 As transmitted for the purpose of providing You the best possible service in terms of: o Enabling and optimizing the performance of ATP; o License administration; o Limiting damage done by installed malware; o Providing support and debugging assistance;
 In an anonymized and/or aggregated form for the general security research purposes of: o Improving the detection of malware; o File sample analysis to discover advanced malware; o Internal research and development, including improving Symantec’s products and services; and/or o Statistical analysis of product deployment, including analysis of trends and comparisons in our aggregated install base.
We may also use Your information to send you promotional information, in accordance with Your permission, as required by applicable law. Symantec may also use anonymized and/or aggregated statistics derived from your information to track and publish reports on security risk trends.
In the event You provide information to Symantec in connection with a technical support request, such information will be processed and used by Symantec for the purpose of providing the requested technical support, including performing error analysis.
We are a global organization and may transfer Your information to other countries, including countries that may have less protective data protection laws than the country in which You are located (including the
European Union). Your Information will be securely stored and processed manually and electronically through global systems and tools for the purposes described in this privacy statement. For the same purposes Your
Information may be disclosed to contractors that process information on behalf of Symantec.
In order to promote research, awareness, detection and prevention of internet security risks, Symantec may share some of the information collected through ATP and/or some of the information we may receive from You when You receive technical support, with relevant public and private entities such as cybersecurity research organizations and security software vendors. In such cases, we will endeavor to anonymize such information or to minimize any identifiable data in it to the extent reasonably possible without defeating said purposes of
© Symantec - All rights reserved Page 2 of 3

Symantec Advanced Threat Protection Platform with
Network and Endpoint Privacy Notice security risk research, awareness, detection and prevention. Symantec may also use aggregated and anonymized statistics derived from your information through ATP or submitted by You, to track and publish reports on security risk trends.
Please be advised that in certain instances, it may be necessary for Symantec to disclose Your personal information to government officials or otherwise as required by our legal obligations.
To protect Your information, we have taken reasonable and appropriate administrative, technical, organizational and physical information security and risk management measures, in accordance with applicable laws and taking into account the state of the art.
It is Your responsibility to ensure that any disclosure by You to Symantec of personal information of Your users or third parties is in compliance with applicable privacy and data security laws. In particular, it is Your responsibility to inform users and third parties that You are providing their information to Symantec, to inform them of how it will be transferred, used or processed, to gather appropriate consents required for such transfer, use or processing, and to complete any applicable administrative procedures.
Subject to applicable laws, Symantec reserves the right to cooperate with any legal process and any law enforcement or other government inquiry, including in relation to Your use of ATP. This means that following applicable due process, Symantec may disclose information if relevant to a court subpoena or to a law enforcement or other government investigation.
Under certain circumstances, You may be able to request to access, update, correct or remove personal information we have about You. We will respond to such requests within 30 days.
We may retain certain data contributed by You to prevent fraud or future abuse, or as otherwise required or permitted by law.
For any inquiry about the information contained in this Notice or about Symantec’s privacy practices, please contact us at privacyteam@symantec.com
.
We reserve the right to revise or modify this Notice. If this happens, we will post a prominent notice on this website prior to the change becoming effective.
If the change would have the effect of introducing a purpose for the use of Your personal information, which is inconsistent with this notice, and where required by applicable law, we will either notify You or provide You with an opportunity to opt-out from such use.
© Symantec - All rights reserved Page 3 of 3