Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Depending on your state, you may have rights to access, delete, correct, or opt out of the sharing of your personal information, and Best Buy states it will not discriminate against you for exercising those rights.
This analysis describes what Best Buy's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The policy enumerates consumer privacy rights including access, deletion, correction, and opt-out rights, which are enforceable under CCPA/CPRA for California residents and under analogous laws in other states, subject to verification and exception processes.
Interpretive note: The precise identity verification requirements and the specific response timeframes stated in the policy were not fully confirmed in the available document text; statutory timeframes are referenced based on CCPA/CPRA as applicable law.
Replaces generic consumer rights provision with state-specific rights framework that explicitly includes 'limit sensitive information' and 'non-discrimination' rights, reflecting evolving state privacy laws like CPRA.
View full change record →The policy states that consumers in applicable states can request access to, deletion of, or correction of their personal information, and can opt out of data sale and sharing, by submitting a request through Best Buy's privacy rights portal.
How other platforms handle this
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
Not be Discriminated Against by us for exercising your privacy rights.
you may also have the right to: (i) opt out of processing of Personal Data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects...and (iii) appeal any decision by ZipRecruiter...
Monitoring
Best Buy has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal information, the right to limit the use of sensitive personal information, and the right to non-discrimination for exercising your privacy rights. To exercise these rights, please submit a request through our privacy rights portal or contact us at the information provided below.Excerpt from Best Buy's Privacy Policy
1. REGULATORY LANDSCAPE: This provision implements consumer rights required by CCPA/CPRA, Virginia's CDPA, Colorado's CPA, Connecticut's CTDPA, and other state privacy statutes. The California Privacy Protection Agency and state attorneys general enforce these rights. The right to limit use of sensitive personal information is a CPRA-specific right that must be operationally distinct from the general opt-out. The non-discrimination right is codified in CCPA and prohibits denial of goods or services, or charging different prices, based on the exercise of privacy rights. 2. GOVERNANCE EXPOSURE: Medium. The enumeration of rights creates operational obligations to maintain functional request intake, identity verification, and response mechanisms within statutory timeframes (45 days under CCPA/CPRA, with a 45-day extension if notified). Failure to respond within required timeframes or to honor verified requests creates direct regulatory exposure. 3. JURISDICTION FLAGS: California creates the most comprehensive set of enforceable rights under CPRA, including the right to correct and the right to limit sensitive personal information use. Virginia, Colorado, and Connecticut residents have analogous but not identical rights. The scope of rights available to consumers in other states depends on whether those states have enacted comprehensive privacy legislation. 4. CONTRACT AND VENDOR IMPLICATIONS: Honoring deletion requests requires coordination with service providers and contractors that hold consumer data on Best Buy's behalf. Vendor agreements should include provisions requiring downstream deletion or cessation of processing upon receipt of verified consumer requests. The identity verification process for rights requests should be audited to ensure it does not create unreasonable barriers to exercise. 5. COMPLIANCE CONSIDERATIONS: The privacy rights portal should be tested for functionality across device types and for accessibility. Response time tracking should be implemented to ensure compliance with applicable statutory deadlines. The process for handling sensitive personal information limitation requests should be operationally distinct from the general opt-out to satisfy CPRA's specific requirements.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
The policy enumerates consumer privacy rights including access, deletion, correction, and opt-out rights, which are enforceable under CCPA/CPRA for California residents and under analogous laws in other states, subject to verification and exception processes.
The policy states that consumers in applicable states can request access to, deletion of, or correction of their personal information, and can opt out of data sale and sharing, by submitting a request through Best Buy's privacy rights portal.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Best Buy.