California residents have specific legal rights to access, delete, correct, and limit use of their personal data, and to opt out of data sales or sharing, exercisable through Ancestry's Privacy Center.
This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California's privacy laws give residents stronger rights over their data than users in most other US states, including specific controls over sensitive personal information like genetic data.
California residents lose direct navigation to the CCPA-mandated 'Do Not Sell or Share My Personal Information' disclosure page from Ancestry's privacy footer. While California law requires the compa…
California residents can exercise data access, deletion, correction, and sale opt-out rights through Ancestry's Privacy Center. Genetic data falls within CPRA's sensitive personal information category, giving California users additional rights to limit its use and disclosure.
How other platforms handle this
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
California law gives residents the right to know what personal information we collect, use, share or sell; to delete personal information under certain circumstances; to opt-out of the sale or sharing of their personal information; to correct inaccurate personal information; to limit the use and dis...
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you. You have the right to request deletion of your personal information, subject to certain exceptions. You have the right to opt out of the sale or sharing of your perso...
Monitoring
Ancestry has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have the right to know what personal information we collect, disclose, and sell; the right to request that we delete your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate personal information; and the right to limit use and disclosure of sensitive personal information. To exercise these rights, you may submit a request through our Privacy Center or by calling our toll-free number.— Excerpt from Ancestry's Ancestry Privacy Statement
(1) REGULATORY LANDSCAPE: This provision directly engages the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). The California Privacy Protection Agency (CPPA) and California Attorney General are the primary enforcement authorities. Genetic data is classified as sensitive personal information under CPRA, requiring specific opt-in or limit-use mechanisms. (2) GOVERNANCE EXPOSURE: Medium. The policy acknowledges California rights but does not specify response timeframes, verification procedures, or the scope of exceptions applied to deletion requests. Compliance teams should verify that operational procedures meet CPRA's 45-day response requirement and that the Privacy Center mechanism functions as described. (3) JURISDICTION FLAGS: This provision applies specifically to California residents. Other states with similar frameworks (Virginia, Colorado, Connecticut, Texas, Oregon) may have analogous rights that the policy addresses separately or in aggregate. (4) CONTRACT AND VENDOR IMPLICATIONS: Service providers processing California residents' data on Ancestry's behalf must be governed by CPRA-compliant data processing agreements. The opt-out-of-sale mechanism must be technically implemented to flow through to all downstream data recipients. (5) COMPLIANCE CONSIDERATIONS: Legal teams should audit the Privacy Center mechanism to confirm it supports all enumerated CPRA rights, including the sensitive personal information limitation right for genetic data. Verify that response timelines, identity verification procedures, and non-discrimination provisions are operationally implemented consistent with CPRA requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California's privacy laws give residents stronger rights over their data than users in most other US states, including specific controls over sensitive personal information like genetic data.
California residents can exercise data access, deletion, correction, and sale opt-out rights through Ancestry's Privacy Center. Genetic data falls within CPRA's sensitive personal information category, giving California users additional rights to limit its use and disclosure.
ConductAtlas has identified this type of provision across 3 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.