California residents have specific rights under state law, including the right to know what data is collected, to delete it, to correct it, to opt out of its sale or sharing, and to not be discriminated against for exercising these rights.
California users have stronger legal protections than users in most other US states, and Figma is obligated to honor these rights upon request.
Figma's CCPA/CPRA compliance obligations include maintaining a compliant opt-out mechanism, honoring verified consumer requests within statutory timeframes (45 days, extendable by 45), and not retaliating against users who exercise rights. Compliance teams should audit Figma's data processing disclosures against CPRA's expanded sensitive data categories.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Figma collects a broad range of personal data including usage patterns, device information, and payment details, and may use this data for AI/ML model improvement and targeted advertising. Your design content and collaboration activity may be processed and shared with third-party service providers and advertising partners. You can submit a privacy rights request (access, deletion, opt-out of data sale/sharing) through Figma's privacy request form at https://www.figma.com/privacy-request/.