California residents have specific legal rights to know what data Fastly has collected about them, to request deletion, to correct inaccurate data, and to opt out of any sale or sharing of their personal information for advertising purposes. Fastly states it will not discriminate against you for exercising these rights.
This analysis describes what Fastly's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are enforceable under California law and provide concrete mechanisms for California residents to control their personal data held by Fastly, including the ability to request full deletion of their information.
California residents can actively request to see, delete, or correct their personal data held by Fastly, and can opt out of data sharing with advertising partners. These rights can be exercised by contacting privacy@fastly.com, and Fastly states it will not penalize you for making these requests.
Cross-platform context
See how other platforms handle California Resident Rights under CCPA/CPRA and similar clauses.
Compare across platforms →Monitoring
Fastly has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA): the right to know about personal information collected, disclosed, or sold; the right to delete personal information; the right to opt-out of the sale or sharing of personal information; the right to non-discrimination for exercising your rights; and the right to correct inaccurate personal information.— Excerpt from Fastly's Fastly Privacy Policy
(1) REGULATORY LANDSCAPE: This provision is governed by the CCPA as amended by the CPRA, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. The CPRA introduced additional rights including correction and expanded the opt-out right to include 'sharing' for cross-context behavioral advertising, not just sale. Regulations implementing the CPRA are operative, and the CPPA has issued enforcement guidance. (2) GOVERNANCE EXPOSURE: Medium. Fastly's acknowledgment of CCPA/CPRA rights is appropriate for a company of its size and reach. The key compliance risk lies in the operational implementation: response timelines (45 days, extendable by 45 days under CCPA), identity verification processes, and the handling of opt-out requests for data sharing with advertising partners. The policy should be reviewed against Fastly's actual data mapping to confirm all CPRA-required categories of disclosure are present. (3) JURISDICTION FLAGS: California is the primary jurisdiction. However, a growing number of US states (Virginia, Colorado, Texas, Florida, Connecticut, and others) have enacted comprehensive privacy laws with similar rights frameworks. Enterprise customers operating in multiple US states should assess whether their reliance on Fastly's privacy disclosures is sufficient across all applicable state regimes. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers who are themselves California businesses must ensure that their service provider contracts with Fastly include CPRA-required contractual terms restricting Fastly's use of personal information to the service context. The policy's disclosure of advertising and analytics data sharing by Fastly may need to be evaluated by enterprise customers to determine whether it constitutes a 'sale' or 'sharing' in the context of their own CPRA obligations. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that Fastly's opt-out mechanism for data sharing is implemented in a manner that is 'easy to use' as required by CPRA, that response processes meet the 45-day statutory timeline, and that the 'Do Not Sell or Share My Personal Information' link is appropriately displayed. California employees of Fastly customers should also consider whether B2B personal data is covered.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights are enforceable under California law and provide concrete mechanisms for California residents to control their personal data held by Fastly, including the ability to request full deletion of their information.
California residents can actively request to see, delete, or correct their personal data held by Fastly, and can opt out of data sharing with advertising partners. These rights can be exercised by contacting privacy@fastly.com, and Fastly states it will not penalize you for making these requests.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Fastly.