Northrop Grumman Online Privacy Notice

U.S. Applicants and Prospects Privacy Notice

Effective March 10, 2025

Last Updated March, 2025

This Privacy Notice (“Notice”) is a supplement to the Northrop Grumman Privacy Notice and applies to U.S. applicants and prospects for job opportunities at Northrop Grumman and its affiliates.

This Notice uses certain terms that have the meaning given to them in the California privacy laws.

Information We Collect/Obtain

Through your interaction with Northrop Grumman as a job applicant or a prospect, we may collect the following categories of Personal Information about you:

  • Contact Information, including name, alias, mailing address, email address, phone number
  • Identifying Information, including ethnicity, citizenship, gender, disability, military and veteran status
  • Employment Information, including work history, salary preferences, work authorization information, information about security clearances, skills, certifications, and other professional or employment-related information
  • Education Information, including résumé or C.V., cover letters, education history or transcripts
  • Inferences, drawn from any of the information identified above to create a profile about you reflecting your preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudesLog-in Credentials, including username, password, time and date of login

Of the Personal Information collected, we may collect the following categories of sensitive Personal Information about you:

  • Identifying Information, including ethnicity
  • Log-in Credentials, including username, password, time and date of login
  • Health Information, should you choose to provide it in connection with an accommodations request

How We Use the Information About You

We will use the above categories of Personal Information and sensitive Personal Information you provide for considering you for a position at Northrop Grumman, and if you are offered a position or become employed by Northrop Grumman, for employment-related and administrative purposes including as described in the below table. 

Purposes

Categories of Personal Information

To provide products and services

Contact Information; Identifying Information; Employment Information; Education Information; Inferences

To fulfill the reason you provided the information

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

To provide you with support and to respond to your requests or inquiries, including to investigate and address any concerns and monitor and improve our responses

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

To operate, evaluate and improve our business (including developing new products and services; enhancing and improving our products and services; managing our communications; analyzing our products, services and communications; and performing accounting, auditing, data analytics and other internal functions)

 

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

To undertake internal research for technological development and demonstration

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

To protect against, identify and prevent cybersecurity and other security events, espionage, fraud and other unlawful activity, claims and other liabilities; and prosecuting those responsible

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

To comply with and enforce applicable legal requirements, contractual obligations, relevant industry standards and our policies

 

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

To respond to law enforcement requests

 

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information held by us is among the assets transferred

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

 

Northrop Grumman leverages artificial intelligence (AI) technology and human review to help us process Personal Information, including job application data, resumes and CVs you provide to us when you engage with Northrop Grumman as a job applicant or as a prospect for an opportunity. Our recruiters assess your skills and qualifications during the hiring process and decide whether you would be a good fit for the role. Such technologies are not used to make automated decisions on job applicants and prospects. If you would like to learn more about how we use these technologies, please contact us using one of the means identified in the “How To Contact Us” section below We may use your Personal Information in other ways for which we provide specific notice at the time of collectionWhere we process Personal Information regarded as “special” in certain jurisdictions, we only process the Personal Information where necessary for the purpose of carrying out obligations in the field of employment and social security and social protection law. Where we wish to rely on consent for that processing, we will seek your explicit consent in writing, and you have the right to withdraw your consent to that processing at any time. For a list of relevant service providers, please contact us using one of the means identified in the “How To Contact Us” section below.

Prior Collection, Use and Disclosure of Personal Information

We may have collected and used your Personal Information, as described in “Information We Collect” and “How We Use the Information We Collect” sections above, during the 12-month period prior to the effective date of this Notice.

For Personal Information collected during such timeframe, we describe below:

  • the categories of sources from which we may have obtained the Personal Information,
  • the categories of Personal Information we may have disclosed for a business purpose and the categories of recipients to whom we may have disclosed such information, and
  • the categories of Personal Information we may have sold or shared to a third party, if any.

Sources of Personal Information

We may have obtained Personal Information about you from various sources, including as described below.

Categories of Sources of Data Collection

Categories of Personal Information

Directly from you (such as when you provide identifiers to gain access to one of our facilities)

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information

Indirectly from you (such as when our security cameras capture your image)

Identifying Information; Log-in Credentials; Inferences

Our subsidiaries

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

Vendors who provide services on our behalf

Log-in Credentials; Internet and Other Electronic Network Activity Information

Our customers and business partners (such as subcontractors and suppliers)

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information

Government agencies, law enforcement, courts and regulators

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

Cybersecurity information sharing resources

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

Social networking services

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information

Public databases

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information

 

Disclosure of Personal Information for a Business Purpose

We may have disclosed certain categories of Personal Information to certain categories of recipients for a business purpose, including as described below.

Categories of Recipients

Categories of Personal Information

Our subsidiaries

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

Vendors who provide services on our behalf

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

Our customers and business partners (such as subcontractors and suppliers)

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

Participants in cyber security information resources (when related to a cyber threat indicator)

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

Government agencies, law enforcement, courts and regulators

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

Other parties in the event of a corporate transaction, such as an acquisition

Contact Information; Identifying Information; Log-in Credentials; Employment Information; Education Information; Inferences

 

For a list of relevant service providers, please contact us using one of the means identified in the “How To Contact Us” section below.

 

Your Rights and Choices

Please refer to the “Your Rights and Choices” section of the Northrop Grumman Privacy Notice for an explanation of the rights and choices you have under applicable laws regarding your personal information.

Data Transfers

Please refer to the “Data Transfers” section of the Northrop Grumman Privacy Notice for information related to the cross-border transfer of personal information to regions other than the region in which the information was collected/obtained.

How We Protect Personal Information

Please refer to the “How We Protect Personal Information” section of the Northrop Grumman Privacy Notice for a description of the measures we undertake to protect your personal information.

Data Retention

Please refer to the “Data Retention” section of the Northrop Grumman Privacy Notice for more information on how long your data may be kept.

Links To Other Websites

Please refer to the “Links To Other Websites” section of the Northrop Grumman Privacy Notice for more information.

Updates To Our Notice

Please refer to the “Updates To Our Notice” section of the Northrop Grumman Privacy Notice for more information.

How To Contact Us

Please refer to the “How To Contact Us” section of the Northrop Grumman Privacy Notice for more information.

Subsidiaries/Affiliates

Please refer to the “Subsidiaries/Affiliates” section of the Northrop Grumman Privacy Notice for more information.