WXP Data Collection and privacy

Introduction

WXP collects and processes device, application, account, and other data to provide device health information, insights, experience scores, fleet analytics, and related services.

This article describes the types of data WXP collects, how the data is grouped and used, what personal data WXP does not collect and how data is managed throughout its lifecycle.

It also describes custom data collection, privacy and consent requirements, data retention and storage and customer access to data under de EU data act.

Data Collection

WXP analyzes device and application telemetry to provide device health information, insights, experience scores, fleet analytics, and aggregated trend reports.

Data is either provided directly by customers or collected automatically by WXP. Data collected from manaaged devices is provided through the WXP agent.

WXP collects the following data to execute contract services:

Purpose of Data Collection	Data Collected	Description of Data Collected
Account management	Account data	Information related to customer purchases or sign-up for WXP services Support history with respect to incidents generated by WXP Other information related to the WXP account required to perform transaction services such as account management
Ensure WXP and services work properly	Application data	WXP Agent version number Installation status Update history of the WXP Agent on each managed device
Account setup, identity management and entitlement validation	Contact data	Personal and/or business contact data, including first name, last name, mailing address, telephone number, fax number, email address, and similar contact details Used for WXP customer account setup and validation, service entitlement, and email notifications related to incidents and services
Deliver proactive IT service maintenance and management, and customer-centric reports/dashboards	Device data	Basic device information: Device name, operating system, amount of memory, device type, disk size, region, language, time zone, model number, initial start date, device age, manufacturing date, browser version, manufacturer, warranty status, unique device identifiers, and other model-specific technical information. Hardware information Core Hardware: BIOS, display, GPU, storage, system slots, memory, real-time clock. System hardware utilization: CPU, GPU, NPU, memory, disk I/O, disk utilization, system power consumption Thermal & Battery: thermal information, fan information, Battery health Drivers & Devices: drivers, PnP devices, RPOS peripherals, docking station (HP only), peripherals connected to docking station System diagnostic & recovery: HP Sure Recover settings, HP diagnostics test, System sleep diagnostics Power & disk configuration: power configuration and state, primary/external disk attribution Platform & advanced hardware telemetry: Intel platform service record (requires Intel vPro), System power consumption by PCM (requires HP business PC G11 or later), Intel SoC margin on memory (only HP business PC G12 later), Laptop’s keyboard health (only HP business PC G12 or later) Installed software applications List of installed applications, application runtime, application errors, and hardware utilization by application (CPU and memory). Note: WXP does not scan or collect content from installed applications and does not configure or reconfigure them. Web applications Number of page visits, page load time, and page load errors for URLs pre-configured on the WXP Settings page. Web application data collection is disabled by default and can be enabled in WXP settings page. We application data collection is disabled by default and can be enabled in WXP Settings. Note: WXP does not scan or collect content from web applications in browsers. Operating system information OS events, missing windows updates, process & service monitoring, startup/sleep/hibernate/shutdown time, device usage time, device log-on time, full and fast boot up time, last restarted date, and system crashes/blue screen on Windows. Note: Crash dump collection is disabled by default and can be enabled on the WXP settings page. Network information Network interface, MAC address, IP address, SSID, signal strength, connection speed, network authentication settings, network errors, network consumption and utilization, packet loss, jitter, latency by process, and network connections/disconnections Note: Network identifier collection is disabled by default and can be enabled through the WXP settings. SSID is collected only if the company admin configures the SSID names to be collected. Security information Trusted Platform Module (TPM), antivirus status, firewall status, BitLocker encryption status, and Secure Boot status. User information Last signed-in user information and Active Directory-joined user information ofr users enrolling their devices in WXP. Note: User information collection is enabled by default and can be disabled in WXP settings. Device location information Live device geolocation and asset location, defined by users to indicate where the device belongs Note: By default, data collection for device location is disabled, but it can be enabled on the WXP settings page. Geolocation capacilbities and tracked information Live device geolocation: current location reported by the device. Asset location: user-defined location indicating where the device is assigned or expected to remain. Integrated geolocation services are used to provide this information Device details also display metadata such as the last reported timestamp and location accuracy. Note: WXP plans include built-in geolocation capabilities. However, device location tracking is disabled by default, but it can be enabled in WXP Settings.
Authentication and authorization of user access to accounts and services that use HP	Security credentials	User passwords, password hints, and similar security information required to authenticate and authorize access to WXP cloud-based portal accounts and services (only if using HP ID)

Data Groupings

Device data collected by WXP ¹ may include the following groupings:

Data Group	Description
Hardware	Including battery, BIOS, disk, display/monitor, graphics, inventory, memory, network interface, Plug and Play (PnP), processor, system clock, system slots, thermal and system performance data.
Software applications	Including compliance, errors, inventory, performance, utilization and web application utilization data.
Security	Including non-reporting devices, operating system patch discovery/management, device location, lock and wipe, security policy setting and security policy enforcement, security threats, storage encryption.
Windows Event Logs	Windows event logs provide detailed record of system, security and application notifications stored by the Windows operating system that is used by administrators to diagnose system problems and predict future issues.
HP Warranty and Care Packs	HP Care Packs are extended warranties for your HP computer or printer that covers products after the standard warranty has expired.

Personal data

WXP collects the following personal data from users:

User e-mail address
Last logged on user account

What WXP does not collect

WXP does not collect the following types of personal data:

Demographic information (with the exception of country or language preferences)
Financial account information, credit or debit card numbers, credit records, or payment data
Social media
Government-issued identifier, such as social security, social insurance number, or Government ID
Sensitive data, such as ethnic origin, political beliefs, trade union membership, health data, sexual orientation, and genetic data

Custom Data Collection

The Custom Data Collection feature allows customers to gather device or system data beyond what is available through the standard WXP Insights agent.

Who can use it: IT Admins, Partner Admins, and Partner Service Specialists with WXP Pro or Elite subscription.
What data is collected: Customers determine whaat data is collected by uploading scripts. Examples include BIOs versions, add-ins, and extensions.
Customer Responsibility: Customers are responsible for all data collected through Custom Data Collection, including ensuring lawful collection, protection, storage, and use in compliance with applicable laws, including, data protection and privacy laws. HP does not control, or monitor the data collected.
Retention: Custom Data Collection reports remain available for 10 days unless restarted.

Data Privacy

For WXP analytics, HP acts as a data processor. The customer is the data controller and owns its data. HP processes the data on the customer’s behalf to provide the WXP service.

As a global company, HP may transfer or provide access to information through HP entities worldwide in accordance with the HP Privacy Statement and applicable international data transfer programs.

WXP data privacy practices are governed by the HP privacy statement, which includes information about:

Privacy Principles
International Data Transfers
How HP uses Data
What Data HP collects
Children's Privacy
Data retention and security
How HP share data
HP communications
Exercising privacy rights and contacting HP
Changes to the Privacy Statement

Data privacy is governed by the HP Privacy statement for countries worldwide.

Access to WXP and the collection of telemetry required to provide the service are governed by the WXP Platform Terms and Conditions accepted during onboarding. This data collection is required to provide the WXP service.

WXP also provides an explicit, opt-in Product Improvement Consent. When an authorized administrator enables this consent at the tenant level, HP may use the tenant's WXP telemetry to improve HP products and services, including analytics, research, and AI/ML model development.

Product Improvement Consent:

Is optional and does not affect the core WXP service
Can be declined by the customer
Can be withdrawn at any time

Note: Web analytics technologies used by WXP start only after the user provides cookie consent.

Data Retention

HP applies data retention practices designed to retain data only as long as necessary to meet contractual, legal, security, and operation requirements. HP’s policy incorporates the following data retention best practices:

Maintaining data for shorter than necessary periods can violate contractual or legal requirements or affect security.
Maintaining data for longer than necessary periods can violate privacy regulations and is a top customer concern and sales inquiry.
Once data is deleted, there is no obligation to provide it to the customer or law enforcement.

Data stored in the United States, Germany, and Australia regional data centers is permanently deleted within 30 days after a customer is deactivated from WXP.

Note: Telemetry data transmitted to the U.S. Analytics data center is associated with device serial numbers and system-generated identifiers and is encrypted at rest in accordance with HP data protection and security standards.

Data storage

Data storage for WXP is limited to the user and device information of paying subscribers.

WXP uses regional data centers to support data residency requirements. The regional data center used for customer dataa depends on the customer’s registration location:

United States: AWS Oregon
European Union: AWS Germany
Australia: AWS Sydney

WXP also operates dedicated analytics and identity management environments in the United States and Australia.

WXP uses separate regional and analytics environments. Customer data is stored in the regional data center associated with the customer’s registration location.

Note
For Australian customers, telemetry and analytics data is stored in the Australia Analytics environment.
For customers in other regions, telemetry and analytics data is stored in the U.S. Analytics environment

The following table shows where each data category is stored.

Data Category	U.S. Regional Data Center¹	U.S. Analytics Data Center²	U.S. Identity Management Data Center³	EU Regional Data Center⁴	Australia Regional Data Center⁵	Australia Analytics Data Center⁵
Account data	Yes	No	No	Yes	Yes	No
Application data	Yes	Yes	No	Yes	Yes	Yes
Contact data	Yes	No	Yes (if using HP ID)	Yes	Yes	No
Device data	Yes	Yes	No	Yes	Yes	Yes
Location data	Yes	No	No	Yes	Yes	No
Security credentials data	No	No	Yes (if using HP ID)	No	No	No

For customers based outside the EU and Australia
For all customers except the ones based on Australia
For all customers
For customers based on EU
For customers based on Australia

All databases and unstructured storage described in this section are encrypted at rest. This includes databases that store personal data in the regional and U.S. Identity Management data centers, as well as a databases and unstructured storage in the U.S. and Australia Analytics data centers.

EU Data Act Compliance – Customer Data Access via WXP

The EU Data Act establishes a framework ensuring that users (including business customers) have access to data generated by their connected devices and services. HP has aligned the WXP with these requirements by enabling customers to securely access and download their device telemetry data directly through the platform.

As part of this compliance initiative, EU customers can:

Request the device telemetry data collected for their tenant
Download the requested data through a secure link generated in the platform (WXP)

Once a request is processed, a secure download link is provided (valid for 30 days), and an alert notification is posted in the WXP Notification Center when the data is ready.

For more information or to view instructions on how to submit or download a request, please refer to the Knowledge Base article: Requesting Telemetry Data under the EU Data Act in WXP.