Provision record
DocuSign · DocuSign Privacy Statement · View original document ↗

Data Subject Rights Request Process

Medium severity High confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track DocuSign and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The notice establishes a Privacy Request Portal as the designated mechanism for submitting data subject rights requests including access, deletion, correction, and export, and states that identity verification is required for all requests, with account login accepted as verification for registered users.

This analysis describes what DocuSign's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the operational procedure for exercising data subject rights under GDPR, UK GDPR, CCPA, and applicable state privacy laws, including the identity verification standard and authorized agent process. The requirement to provide additional verification for non-account holders may affect the ease of exercising rights for individuals who receive documents through DocuSign without having a registered account.

Clause Stability Stable

0
Changes
5
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

Under this provision, individuals can submit rights requests including deletion, correction, access, and data export through the DocuSign Privacy Request Portal, with identity verification required as a condition of processing. Authorized agents may submit requests on behalf of individuals subject to verification of the agent's authority.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Visit the DocuSign Privacy Request Portal and submit a deletion or rights request. You will be required to verify your identity through your account login if you are a registered user, or by providing additional identifying information if you are not.
  • Export Your Data
    Submit a data export request through the DocuSign Privacy Request Portal with identity verification completed. The portal accepts requests from authorized agents with documentation of authorization.

Cross-platform context

See how other platforms handle Data Subject Rights Request Process and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
To exercise any of these rights, please contact us via the Docusign Privacy Request Portal. If you make a request to exercise the rights referenced above, we will require you to provide certain information for identity verification purposes. If you have an account with us, we may verify you through your login of your account. If you do not have an account with us, we may require you to provide additional information from which we can confirm your identity. You may authorize an agent to make a request to us on your behalf and we will verify the identity of your agent or authorized legal representative by either seeking confirmation from you or documents that establish the agent's authorization to act on your behalf.

Excerpt from DocuSign's Privacy Statement

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →
  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Provision details

Document information
Document
DocuSign Privacy Statement
Entity
DocuSign
Document last updated
May 5, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-014913
Document ID
CA-D-00198
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
db171ce667d98db1d8936fb125acc66e0d283cc7f0c00e08307fb68fd757092c
Analysis generated
July 9, 2026 06:43 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: DocuSign
Document: DocuSign Privacy Statement
Record ID: CA-P-014913
Captured: 2026-07-09 06:43:10 UTC
SHA-256: db171ce667d98db1…
URL: https://conductatlas.com/platform/docusign/docusign-privacy-statement/provision/CA-P-014913/data-subject-rights-request-process/
Accessed: Sept. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does DocuSign's Data Subject Rights Request Process clause do?

This provision establishes the operational procedure for exercising data subject rights under GDPR, UK GDPR, CCPA, and applicable state privacy laws, including the identity verification standard and authorized agent process. The requirement to provide additional verification for non-account holders may affect the ease of exercising rights for individuals who receive documents through DocuSign without having a registered account.

How does this clause affect you?

Under this provision, individuals can submit rights requests including deletion, correction, access, and data export through the DocuSign Privacy Request Portal, with identity verification required as a condition of processing. Authorized agents may submit requests on behalf of individuals subject to verification of the agent's authority.

Is ConductAtlas affiliated with DocuSign?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by DocuSign.