Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy states that consumers may submit requests for deletion of their personal information, subject to exceptions, and that Ford will verify identity and respond within legally required timeframes.
This analysis describes what Ford's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes deletion rights under CCPA/CPRA and analogous state frameworks. The reference to 'certain exceptions' is significant because CPRA permits retention of data for a range of business purposes that may limit the practical scope of deletion requests, particularly for vehicle service and warranty records.
Interpretive note: The scope of 'certain exceptions' to deletion is not exhaustively enumerated in the policy, and the practical scope of enforceable deletion rights will vary by jurisdiction.
Ford's updated privacy policy now explicitly states it governs data collection, use, sharing, and protection across all Ford websites, apps, and services, rather than limiting its scope to ford.com and owner.ford.com. This expanded framing indicates the policy applies more broadly to Ford's digital properties and potentially to data collected through connected vehicles and mobile applications. The policy continues to require vehicle owners to inform other drivers and passengers about privacy safeguards and to perform a Master/User Reset before selling or transferring a vehicle.
View change record →The updated privacy policy effective January 16, 2026 modifies how Ford will notify you if it makes material changes to this policy. Previously, the language stated Ford would provide notice to enable you to exercise rights regarding your personal information. The revised language now states notice will be provided 'as may be required by law,' meaning Ford's obligation to notify you depends on applicable legal requirements rather than a contractual commitment to advance notice. Additionally, the policy clarifies connected vehicle data sharing icons and descriptions to better explain when Vehicle Data, Vehicle Location, and Driving Data are being transmitted from your vehicle.
View change record →The updated privacy policy establishes a more structured disclosure framework with explicit California privacy rights information and cookie consent management. The revised terms now route California residents to supplemental privacy notices that explain collection practices and provide mechanisms to exercise privacy rights. The removal of specific language describing customer review collection processes and dealership moderation standards means these details are now consolidated into the main privacy notice rather than appearing in review-specific sections. You can access California-specific privacy rights and consent options through the links provided in the updated privacy notice.
View change record →This provision establishes that consumers can submit deletion requests for personal information Ford has collected, and Ford will process these requests subject to statutory exceptions. Consumers must complete an identity verification process before their deletion request is fulfilled.
Cross-platform context
See how other platforms handle Data Deletion Request Rights and similar clauses.
Compare across platforms →Monitoring
Ford has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"You have the right to request that we delete personal information that we have collected from you, subject to certain exceptions. To submit a deletion request, please use our privacy request form or contact us at the information provided below. We will verify your identity before processing your request and will respond within the timeframes required by applicable law.Excerpt from Ford's Privacy Policy
1. REGULATORY LANDSCAPE: This provision implements the CCPA/CPRA deletion right, which is subject to enumerated exceptions including data needed to complete transactions, detect security incidents, comply with legal obligations, or engage in internal uses reasonably aligned with consumer expectations. Enforcement authority rests with the California Privacy Protection Agency and the California Attorney General. Analogous deletion rights exist under Virginia, Colorado, and other state privacy laws. 2. GOVERNANCE EXPOSURE: Medium. The policy's reference to 'certain exceptions' without exhaustive enumeration creates ambiguity about which categories of Ford-collected data are subject to deletion versus retention. Vehicle service records, warranty data, and safety-related telematics may be retained under applicable exceptions, which should be clearly communicated to consumers at the point of request. 3. JURISDICTION FLAGS: California CPRA requires responses to deletion requests within 45 days, with a possible 45-day extension. Residents of Virginia, Colorado, Connecticut, and Texas have analogous deletion rights under their respective state privacy laws, though this policy's explicit deletion right disclosure is framed around California. Consumers in states without comprehensive privacy laws may have limited enforceable deletion rights. 4. CONTRACT AND VENDOR IMPLICATIONS: Ford's service provider agreements should include obligations to honor deletion requests forwarded by Ford, including telematics platform providers, dealer systems, and data broker relationships. The practical enforceability of downstream deletion may depend on contractual terms with third parties. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that Ford's identity verification process for deletion requests complies with CPRA requirements and does not impose barriers that effectively prevent consumers from exercising their rights. Data mapping should identify all systems holding consumer data so that deletion requests can be honored comprehensively across Ford's infrastructure.
This provision operationalizes deletion rights under CCPA/CPRA and analogous state frameworks. The reference to 'certain exceptions' is significant because CPRA permits retention of data for a range of business purposes that may limit the practical scope of deletion requests, particularly for vehicle service and warranty records.
This provision establishes that consumers can submit deletion requests for personal information Ford has collected, and Ford will process these requests subject to statutory exceptions. Consumers must complete an identity verification process before their deletion request is fulfilled.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Ford.