The policy discloses that California residents hold CCPA/CPRA rights to access, delete, correct, and opt out of sale or sharing of personal information, and states that Brex will not discriminate against users who exercise these rights.
This analysis describes what Brex's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational framework for Brex's CCPA/CPRA compliance obligations, requiring functioning request intake mechanisms, defined response timelines, and non-discrimination assurances for California residents exercising privacy rights.
Interpretive note: The source document was truncated; specific verbatim language reflects available policy content and standard CCPA/CPRA disclosure requirements.
California residents may submit requests to access, delete, or correct personal information held by Brex, and may opt out of data sale or sharing for targeted advertising, with a stated right to non-discrimination for exercising these rights.
How other platforms handle this
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Monitoring
Brex has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you; the right to delete personal information we have collected from you; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of your personal information; and the right to non-discrimination for exercising your privacy rights.— Excerpt from Brex's Brex Privacy Policy
(1) REGULATORY LANDSCAPE: This provision directly implements CCPA as amended by CPRA, enforced by the California Privacy Protection Agency and California Attorney General. CPRA requires response to verified consumer requests within 45 days (extendable by an additional 45 days with notice), maintenance of at least two designated methods for submitting requests, and a prohibition on discriminatory treatment for rights exercise. (2) GOVERNANCE EXPOSURE: Medium. The provision creates operational obligations including verified request intake, response tracking, and record-keeping for a 24-month lookback period on data sharing. Failure to honor requests within statutory timelines creates enforcement exposure. (3) JURISDICTION FLAGS: Applies specifically to California residents. Other US states with comprehensive privacy laws (Virginia CDPA, Colorado CPA, Connecticut CTDPA) provide analogous rights and may require parallel operational infrastructure. (4) CONTRACT AND VENDOR IMPLICATIONS: Service provider and data sharing agreements must support downstream deletion and correction requests; compliance teams should confirm contractual obligations on vendors to assist with consumer rights fulfillment. (5) COMPLIANCE CONSIDERATIONS: Review whether request intake mechanisms cover all five rights listed; confirm identity verification procedures are not unduly burdensome; assess record-keeping practices for rights request logs; and verify that authorized agent submission procedures are documented and operational.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational framework for Brex's CCPA/CPRA compliance obligations, requiring functioning request intake mechanisms, defined response timelines, and non-discrimination assurances for California residents exercising privacy rights.
California residents may submit requests to access, delete, or correct personal information held by Brex, and may opt out of data sale or sharing for targeted advertising, with a stated right to non-discrimination for exercising these rights.
ConductAtlas has identified this type of provision across 14 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Brex.