If you live in California, you have specific legal rights to see, delete, correct, and opt out of the sale or sharing of your personal data with Airbnb, and Airbnb cannot penalize you for exercising these rights.
This analysis describes what Airbnb's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California's CPRA gives residents enforceable rights over their personal data that go beyond what users in most other US states have, including the right to limit how sensitive data like biometrics and geolocation is used.
Interpretive note: The exact verbatim text was not fully available in the truncated document; the provision reflects standard Airbnb Privacy Policy CPRA disclosures based on publicly available policy versions.
This provision means California residents have actionable rights to request access to, correction of, and deletion of their personal information held by Airbnb, and can opt out of having their data shared with advertising partners, with these rights enforceable through the California Privacy Protection Agency.
Cross-platform context
See how other platforms handle California Resident Rights Under CPRA and similar clauses.
Compare across platforms →Monitoring
Airbnb has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you may have the right to: know what personal information we collect about you and how we use and share it; delete your personal information; correct inaccurate personal information; opt out of the sale or sharing of your personal information; limit the use and disclosure of your sensitive personal information; and not be discriminated against for exercising your rights.— Excerpt from Airbnb's Airbnb Privacy Policy
REGULATORY LANDSCAPE: This provision directly implements CPRA rights for California residents, enforced by the California Privacy Protection Agency and the California Attorney General. The rights enumerated (know, delete, correct, opt out of sale/sharing, limit sensitive data use, non-discrimination) are statutory rights under CPRA. Airbnb's operational response procedures, including timelines for responding to requests (generally 45 days with a possible 45-day extension under CPRA), must meet statutory standards. Failure to honor these rights is subject to civil penalties. GOVERNANCE EXPOSURE: Medium. The provision correctly enumerates CPRA rights, but operational compliance requires robust request intake, verification, and response workflows. The 'Do Not Share' right for advertising purposes requires technical implementation including honoring Global Privacy Control signals, which has been an active enforcement focus. Non-compliance carries civil penalties of up to $7,500 per intentional violation under CPRA. JURISDICTION FLAGS: This provision applies exclusively to California residents. However, other US state privacy laws in Virginia, Colorado, Connecticut, Utah, and Texas also grant similar rights that Airbnb's privacy practices should address, even if not enumerated in the same provision. Legal teams should monitor whether Airbnb's rights response infrastructure is being extended to cover these additional state frameworks as they come into effect. CONTRACT AND VENDOR IMPLICATIONS: Service provider agreements must include CPRA-compliant contractual terms prohibiting third parties from using personal information received from Airbnb for their own purposes, retaining it beyond the service relationship, or selling or sharing it downstream. Audit rights for vendor compliance with these restrictions should be evaluated. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that Airbnb's consumer rights request portal supports all enumerated CPRA rights, including the limit sensitive personal information use right which is distinct from the deletion right. Response timelines, verification procedures, and appeal mechanisms should be documented and tested. Global Privacy Control signal recognition should be audited for implementation on Airbnb's web properties.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California's CPRA gives residents enforceable rights over their personal data that go beyond what users in most other US states have, including the right to limit how sensitive data like biometrics and geolocation is used.
This provision means California residents have actionable rights to request access to, correction of, and deletion of their personal information held by Airbnb, and can opt out of having their data shared with advertising partners, with these rights enforceable through the California Privacy Protection Agency.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Airbnb.