California residents have specific legal rights to access, delete, correct, and limit use of their personal data, and to opt out of data sales or sharing, exercisable through Ancestry's Privacy Center.
This analysis describes what Ancestry's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California's privacy laws give residents stronger rights over their data than users in most other US states, including specific controls over sensitive personal information like genetic data.
The updated Privacy Statement no longer displays a dedicated 'Do Not Sell or Share My Personal Information' link in the footer, which was previously accessible to California residents under CCPA requirements. This link allowed users to exercise data-sharing opt-out rights. The footer now lists 'Consumer Health Privacy' as a separate item but does not explicitly direct users to their CCPA controls. California residents may need to locate their opt-out rights through alternative navigation paths on the Ancestry site.
View change record →The updated Privacy Statement clarifies what uses of Ancestry services are permitted and prohibited, establishes that photo face-grouping in your gallery requires your express consent, and introduces SMS messaging as a communication channel for future opt-in communications. The statement now covers Ancestry, AncestryDNA, and Related Brands under a unified framework while noting that other services operated by the company use separate privacy statements. The removal of 'uploaded DNA data' from the account creation section reflects a narrowing of that specific provision's scope, though genetic information processing remains described elsewhere in the policy. You can review the full updated statement to understand how your personal information will be processed and manage your communication preferences when SMS opt-ins become available.
View change record →California residents lose direct navigation to the CCPA-mandated 'Do Not Sell or Share My Personal Information' disclosure page from Ancestry's privacy footer. While California law requires the company to honor data sale opt-out requests, removing the link reduces visibility and accessibility of this right. California residents can locate this right by searching Ancestry's website or contacting the company directly, but the removal creates an additional barrier to exercising a legally protected option.
View change record →California residents can exercise data access, deletion, correction, and sale opt-out rights through Ancestry's Privacy Center. Genetic data falls within CPRA's sensitive personal information category, giving California users additional rights to limit its use and disclosure.
How other platforms handle this
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
Monitoring
Ancestry has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have the right to know what personal information we collect, disclose, and sell; the right to request that we delete your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate personal information; and the right to limit use and disclosure of sensitive personal information. To exercise these rights, you may submit a request through our Privacy Center or by calling our toll-free number.— Excerpt from Ancestry's Ancestry Privacy Statement
(1) REGULATORY LANDSCAPE: This provision directly engages the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). The California Privacy Protection Agency (CPPA) and California Attorney General are the primary enforcement authorities. Genetic data is classified as sensitive personal information under CPRA, requiring specific opt-in or limit-use mechanisms. (2) GOVERNANCE EXPOSURE: Medium. The policy acknowledges California rights but does not specify response timeframes, verification procedures, or the scope of exceptions applied to deletion requests. Compliance teams should verify that operational procedures meet CPRA's 45-day response requirement and that the Privacy Center mechanism functions as described. (3) JURISDICTION FLAGS: This provision applies specifically to California residents. Other states with similar frameworks (Virginia, Colorado, Connecticut, Texas, Oregon) may have analogous rights that the policy addresses separately or in aggregate. (4) CONTRACT AND VENDOR IMPLICATIONS: Service providers processing California residents' data on Ancestry's behalf must be governed by CPRA-compliant data processing agreements. The opt-out-of-sale mechanism must be technically implemented to flow through to all downstream data recipients. (5) COMPLIANCE CONSIDERATIONS: Legal teams should audit the Privacy Center mechanism to confirm it supports all enumerated CPRA rights, including the sensitive personal information limitation right for genetic data. Verify that response timelines, identity verification procedures, and non-discrimination provisions are operationally implemented consistent with CPRA requirements.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California's privacy laws give residents stronger rights over their data than users in most other US states, including specific controls over sensitive personal information like genetic data.
California residents can exercise data access, deletion, correction, and sale opt-out rights through Ancestry's Privacy Center. Genetic data falls within CPRA's sensitive personal information category, giving California users additional rights to limit its use and disclosure.
ConductAtlas has identified this type of provision across 4 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ancestry.