If you live in California, you have specific legal rights under the CCPA and CPRA to see, delete, or opt out of the sharing of your personal information, and Delta cannot penalize you for exercising those rights.
This analysis describes what Delta Airlines's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California's comprehensive privacy laws give residents more control over their personal data than federal law currently provides, including the right to stop Delta from sharing data with promotional partners.
California residents have enforceable rights to request a copy of the personal information Delta holds about them, request its deletion, and opt out of its sharing with marketing partners; exercising these rights is an available, specific action that can limit how broadly personal data is distributed.
How other platforms handle this
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you. You have the right to request deletion of your personal information, subject to certain exceptions. You have the right to opt out of the sale or sharing of your perso...
If you are a California resident, you have the right to know what personal information we collect about you, the right to delete personal information we have collected from you, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal informa...
Monitoring
Delta Airlines has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"California residents have the right to know what personal information Delta collects, uses, and discloses; the right to request deletion of personal information; the right to opt out of the sale or sharing of personal information; and the right not to be discriminated against for exercising these rights. California residents may submit requests through Delta's privacy portal.— Excerpt from Delta Airlines's Delta Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. The CPRA expanded CCPA to cover sharing of personal information for cross-context behavioral advertising, added a sensitive personal information category with additional opt-out rights, and established the CPPA as a dedicated enforcement authority with rulemaking and audit powers. GOVERNANCE EXPOSURE: High for California operations. The CPRA requires not only that opt-out rights be available but that they be implemented through specific technical mechanisms (including Global Privacy Control recognition) and that responses to consumer requests be fulfilled within 45-day statutory windows. Noncompliance with request response timelines or opt-out mechanisms is a direct enforcement trigger. JURISDICTION FLAGS: This provision applies specifically to California residents, though similar rights frameworks exist under Virginia CDPA, Colorado Privacy Act, Connecticut CTDPA, and Texas Data Privacy and Security Act, among others. Compliance teams should evaluate whether Delta's privacy rights infrastructure satisfies the operational requirements of each applicable state, not just California. CONTRACT AND VENDOR IMPLICATIONS: Delta's service providers and third-party partners receiving California residents' data must be subject to contracts that restrict them to using the data only for the purposes disclosed in the policy and complying with consumer request obligations. The CPRA's contractor and service provider definitions impose specific contractual requirements that should be reflected in vendor agreements. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that Delta's privacy portal fully implements all required CPRA rights including access, deletion, correction, portability, and opt-out of sharing; that Global Privacy Control signals are recognized and acted upon; that sensitive personal information opt-out rights are separately available; and that response time tracking meets the 45-day statutory requirement. Annual CCPA/CPRA training and policy reviews should confirm ongoing alignment with CPPA regulatory guidance.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California's comprehensive privacy laws give residents more control over their personal data than federal law currently provides, including the right to stop Delta from sharing data with promotional partners.
California residents have enforceable rights to request a copy of the personal information Delta holds about them, request its deletion, and opt out of its sharing with marketing partners; exercising these rights is an available, specific action that can limit how broadly personal data is distributed.
ConductAtlas has identified this type of provision across 15 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Delta Airlines.