If you live in California, you have specific legal rights to see what data Coinbase has about you, ask for it to be deleted, and opt out of Coinbase selling or sharing your personal information.
This analysis describes what Coinbase's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California residents have enforceable rights under CCPA and CPRA that give them more control over their personal data than the general policy terms, including the right to opt out of data sharing for targeted advertising purposes.
California residents can submit requests to access, delete, or opt out of the sale or sharing of their personal information held by Coinbase, and the policy states they may not be discriminated against for exercising these rights.
Cross-platform context
See how other platforms handle California Resident Rights (CCPA/CPRA) and similar clauses.
Compare across platforms →Monitoring
Coinbase has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have the right to know about the personal information we collect, use, disclose, and sell about you; the right to request deletion of your personal information; the right to opt-out of the sale or sharing of your personal information; and the right to non-discrimination for exercising your privacy rights.— Excerpt from Coinbase's Coinbase Privacy Policy
REGULATORY LANDSCAPE: This provision directly implements California Consumer Privacy Act and California Privacy Rights Act requirements enforced by the California Privacy Protection Agency and the California Attorney General. The CPRA's expanded definitions of sharing and sensitive personal information are particularly relevant given Coinbase's collection of biometric, financial, and government ID data. GOVERNANCE EXPOSURE: Medium. The adequacy of Coinbase's opt-out mechanisms, response timelines (45 days with possible 45-day extension under CCPA), and the scope of the financial institution exemption under CCPA for GLBA-covered data require careful documentation to avoid enforcement exposure. JURISDICTION FLAGS: California residents have a private right of action for certain data breaches under CCPA. The CPRA's sensitive personal information opt-out right applies to biometric, financial, and government ID data collected by Coinbase. Coinbase's status as a financial institution subject to GLBA may create partial exemptions for certain data categories, the scope of which requires legal assessment. CONTRACT AND VENDOR IMPLICATIONS: Service provider agreements with all vendors receiving California resident data must contain CCPA-compliant service provider clauses prohibiting secondary use of that data. The opt-out must be implementable downstream in vendor data flows. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the opt-out of sale or sharing mechanism is operational, clearly accessible, and that opt-out signals such as Global Privacy Control are honored. The 45-day response period for data access and deletion requests should be monitored and documented. Annual CPRA data inventory updates are required to maintain an accurate record of processing activities involving California resident data.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California residents have enforceable rights under CCPA and CPRA that give them more control over their personal data than the general policy terms, including the right to opt out of data sharing for targeted advertising purposes.
California residents can submit requests to access, delete, or opt out of the sale or sharing of their personal information held by Coinbase, and the policy states they may not be discriminated against for exercising these rights.
ConductAtlas has identified this type of provision across 15 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Coinbase.