What can I do about this clause?

{'method': 'EMAIL', 'recipient': 'privacy@deepl.com', 'difficulty': 'EASY', 'action_type': 'EXPORT_DATA', 'instructions': 'Email privacy@deepl.com to request a copy of your personal data in a structured, machine-readable format. Include your account information and specify that you are making a data portability request under GDPR Art. 20 or CCPA.', 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'FTC', 'reason': "The FTC enforces consumer data rights under Section 5 of the FTC Act and has issued guidance on companies' obligations to honor deletion and access requests.", 'complaint_url': 'https://reportfraud.ftc.gov/'}

What is the severity of this clause?

ConductAtlas classifies this Data Subject Rights (Access, Erasure, Portability, Objection) clause as medium severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

Data Subject Rights (Access, Erasure, Portability, Objection) — DeepL

Share 𝕏 Share in Share 🔒 PDF

What it is

You have the right to ask DeepL what data they hold about you, correct errors, request deletion, get a copy of your data, and object to certain uses of your data.

Consumer impact (what this means for users)

Users can exercise rights to access, correct, delete, or export their personal data held by DeepL, and can object to processing based on legitimate interests — including potentially the use of translation input for AI training.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Export Your Data

Email privacy@deepl.com to request a copy of your personal data in a structured, machine-readable format. Include your account information and specify that you are making a data portability request under GDPR Art. 20 or CCPA.

Cross-platform context

See how other platforms handle Data Subject Rights (Access, Erasure, Portability, Objection) and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

These rights give consumers meaningful control over their personal data held by DeepL, including the ability to demand deletion or a machine-readable export of their data.

View original clause language

You have the right to request information about the personal data we have stored about you. You also have the right to rectify incorrect personal data and to request that we delete your personal data, provided that there is no legal obligation to retain such data. Furthermore, where applicable, you have the right to request that we restrict the processing of your personal data and to receive the personal data you have provided to us in a structured, common, machine-readable format. Where we process your personal data based on legitimate interests, you have the right to object to such processing.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: These rights are mandated by GDPR Arts. 15 (access), 16 (rectification), 17 (erasure), 18 (restriction), 20 (portability), and 21 (objection). UK GDPR confers equivalent rights. CCPA §1798.100–1798.125 provides parallel rights for California residents including the right to know, delete, and correct. Enforcement is by LDI NRW (GDPR), ICO (UK GDPR), and California Privacy Protection Agency (CPPA) respectively. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

FTC

The FTC enforces consumer data rights under Section 5 of the FTC Act and has issued guidance on companies' obligations to honor deletion and access requests.
File a complaint →

Provision details

Document information

Document

DeepL Privacy Policy

Entity

DeepL

Document last updated

April 29, 2026

Tracking information

First tracked

April 30, 2026

Last verified

April 30, 2026

Record ID

CA-P-004051

Document ID

CA-D-00448

Evidence Provenance

Source URL

https://www.deepl.com/en/privacy

Wayback Machine

View archived versions →

SHA-256

1d621c54ed3a19fc9ce7b2fc58fa1eb740cb4e4b7669ebdc020370950f152344

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: DeepL | Document: DeepL Privacy Policy | Record: CA-P-004051
Captured: 2026-04-30 05:39:12 UTC | SHA-256: 1d621c54ed3a19fc…
URL: https://conductatlas.com/platform/deepl/deepl-privacy-policy/data-subject-rights-access-erasure-portability-objection/
Accessed: May 2, 2026

Classification

Severity

Medium

Data Subject Rights (Access, Erasure, Portability, Objection)