Asana · Asana Privacy Statement · View original document ↗

CCPA Rights for California Residents

Medium severity Rare · 8 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity Asana recorded 2 documented changes in the last 30 days.
Start monitoring updates
Monitor governance changes for Asana Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

If you live in California, you have specific legal rights under state law to see, delete, correct, and limit how Asana uses your personal information, and Asana cannot penalize you for exercising these rights.

This analysis describes what Asana's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

California residents have broader privacy rights than most US users, including the right to opt out of data sharing that could be classified as a 'sale' under CCPA, which is particularly relevant given Asana's use of third-party analytics and advertising technologies.

Consumer impact (what this means for users)

California residents can exercise six distinct data rights under CCPA/CPRA against Asana, including the right to opt out of any sharing of personal information that constitutes a 'sale,' which may include data shared with advertising technology vendors used by Asana's marketing infrastructure.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Within 45 days
    California residents can submit a data deletion, access, or correction request by emailing privacy@asana.com. Asana is required to respond within 45 days under CCPA. Specify which right you are exercising and include enough information to verify your identity.

How other platforms handle this

Groq Medium

We use your information for the following purposes: ... In accordance with applicable legal requirements, for advertising and marketing purposes, including to send you information about products or services that may be of interest to you...

ADP Medium

If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...

Verizon Medium

California law gives residents the right to know what personal information we collect, use, share or sell; to delete personal information under certain circumstances; to opt-out of the sale or sharing of their personal information; to correct inaccurate personal information; to limit the use and dis...

See all platforms with this clause type →

Monitoring

Asana has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, and sell about you; Delete personal information we have collected from you; Opt-out of the sale or sharing of your personal information; Non-discrimination for exercising your CCPA rights; Correct inaccurate personal information; and Limit the use and disclosure of sensitive personal information.

— Excerpt from Asana's Asana Privacy Statement

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY FRAMEWORK: Implicates CCPA (Cal. Civ. Code §1798.100 et seq.) as amended by CPRA (Prop. 24, effective Jan. 1, 2023), including §1798.100 (right to know), §1798.105 (right to delete), §1798.120 (right to opt out of sale), §1798.125 (non-discrimination), §1798.106 (right to correct), and §1798.121 (sensitive personal information). Enforcement authority: California Privacy Protection Agency (CPPA) and California Attorney General.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • State AG
    The California Attorney General and the California Privacy Protection Agency (CPPA) enforce CCPA/CPRA rights, including the right to deletion, access, and opt-out of sale for California residents.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Asana Privacy Statement
Entity
Asana
Document last updated
May 5, 2026
Tracking information
First tracked
May 8, 2026
Last verified
May 8, 2026
Record ID
CA-P-006654
Document ID
CA-D-00558
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
a1020e9d2ac4ad253f690acce4f06452f86acc441617be1cef5055daa7f41f44
Analysis generated
May 8, 2026 12:27 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Asana
Document: Asana Privacy Statement
Record ID: CA-P-006654
Captured: 2026-05-08 12:27:36 UTC
SHA-256: a1020e9d2ac4ad25…
URL: https://conductatlas.com/platform/asana/asana-privacy-statement/ccpa-rights-for-california-residents/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Asana's CCPA Rights for California Residents clause do?

California residents have broader privacy rights than most US users, including the right to opt out of data sharing that could be classified as a 'sale' under CCPA, which is particularly relevant given Asana's use of third-party analytics and advertising technologies.

How does this clause affect you?

California residents can exercise six distinct data rights under CCPA/CPRA against Asana, including the right to opt out of any sharing of personal information that constitutes a 'sale,' which may include data shared with advertising technology vendors used by Asana's marketing infrastructure.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 8 platforms. See the full comparison.

Is ConductAtlas affiliated with Asana?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Asana.