What can I do about this clause?

{'method': 'WEB_FORM', 'recipient': 'https://www.coinbase.com/settings/privacy-rights', 'difficulty': 'EASY', 'action_type': 'EXPORT_DATA', 'instructions': 'Go to coinbase.com/settings/privacy-rights while logged into your Coinbase account. Select the type of request (access, correction, deletion, or data export/portability) and complete the form. Coinbase is required to respond within 45 days for California residents and one month for EU/EEA users.', 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': 'FTC has authority to act on unfair or deceptive practices where companies fail to honor stated privacy rights commitments under Section 5 of the FTC Act.', 'complaint_url': 'https://reportfraud.ftc.gov/'}, {'agency': 'State_AG', 'reason': 'State Attorneys General enforce consumer privacy rights including CCPA/CPRA in California and equivalent state privacy laws in Virginia, Colorado, Connecticut, and other states.', 'complaint_url': 'https://www.naag.org/find-my-ag/'}

What is the severity of this clause?

ConductAtlas classifies this Consumer Privacy Rights (Access, Deletion, Correction, Portability) clause as medium severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Consumer Privacy Rights (Access, Deletion, Correction, Portability) — Coinbase

Share 𝕏 Share in Share 🔒 PDF

What it is

Depending on where you live, you may have rights to access, correct, delete, or export your personal information by submitting a request through Coinbase's online Privacy Rights portal.

Change history

modified Apr 29, 2026

Current version adds '(subject to certain exceptions)' qualifier to deletion rights, removes 'object to or restrict processing' and 'opt out of targeted advertising', and adds 'lodge a complaint with data protection authority'.

View full change record →

Consumer impact (what this means for users)

Coinbase provides a centralized Privacy Rights portal at coinbase.com/settings/privacy-rights where you can submit requests to access, correct, delete, or export your personal data, though deletion rights are subject to significant AML/KYC legal retention exemptions.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Export Your Data

Go to coinbase.com/settings/privacy-rights while logged into your Coinbase account. Select the type of request (access, correction, deletion, or data export/portability) and complete the form. Coinbase is required to respond within 45 days for California residents and one month for EU/EEA users.

Cross-platform context

See how other platforms handle Consumer Privacy Rights (Access, Deletion, Correction, Portability) and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Knowing how to exercise these rights is essential — you can request a copy of all data Coinbase holds about you, correct errors in your identity records, or request deletion of data not subject to legal retention requirements.

View original clause language

Depending on where you live, you may have certain rights with respect to your personal information, including the right to: access your personal information; correct inaccurate personal information; delete your personal information (subject to certain exceptions); receive a copy of your personal information in a portable format; opt out of the sale or sharing of your personal information; and lodge a complaint with a data protection authority. To exercise any of these rights, you can submit a request through our Privacy Rights page at coinbase.com/settings/privacy-rights.

Institutional analysis (Compliance & legal intelligence)

REGULATORY FRAMEWORK: GDPR Arts. 15-22 establish rights of access, rectification, erasure, restriction, portability, and objection for EU/EEA users; Art. 12 requires responses within one month (extendable to three). CCPA §§1798.100-1798.125 and CPRA amendments establish equivalent rights for California residents with 45-day response deadline (extendable to 90 days with notice). Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and other state laws establish similar rights with varying deadlines. UK GDPR establishes equivalent rights for UK users with one-month response deadline. Enforcement: EU/EEA DPAs, CPPA/California AG, state AGs, ICO.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

FTC

FTC has authority to act on unfair or deceptive practices where companies fail to honor stated privacy rights commitments under Section 5 of the FTC Act.
File a complaint →
State AG

State Attorneys General enforce consumer privacy rights including CCPA/CPRA in California and equivalent state privacy laws in Virginia, Colorado, Connecticut, and other states.
File a complaint →

Provision details

Document information

Document

Coinbase Privacy Policy

Entity

Coinbase

Document last updated

April 29, 2026

Tracking information

First tracked

April 28, 2026

Last verified

April 28, 2026

Record ID

CA-P-003944

Document ID

CA-D-00048

Evidence Provenance

Source URL

https://www.coinbase.com/legal/privacy

Wayback Machine

View archived versions →

SHA-256

0df5ab0df20db0a78e8b5a6a0df5e76babd3c3ab052afbbf8fc888f9ea388099

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Coinbase | Document: Coinbase Privacy Policy | Record: CA-P-003944
Captured: 2026-04-28 09:19:28 UTC | SHA-256: 0df5ab0df20db0a7…
URL: https://conductatlas.com/platform/coinbase/coinbase-privacy-policy/consumer-privacy-rights-access-deletion-correction-portability/
Accessed: May 2, 2026

Classification

Severity

Medium

Consumer Privacy Rights (Access, Deletion, Correction, Portability)