Headspace · Headspace Privacy Policy · View original document ↗

California CPRA Sensitive Personal Information and Opt-Out Rights

High severity Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Headspace Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

California residents have the right to opt out of the sale or sharing of their personal information, limit the use of sensitive personal information (including health data), and request access, correction, or deletion of their data under the California Privacy Rights Act.

This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision operationalizes statutory obligations under CPRA by establishing the mechanism through which consumers can restrict data usage to service delivery purposes and control commercial data transfer practices. The clause creates a framework where consumers may affirmatively exercise limitation and opt-out rights that Headspace must honor through its data handling procedures.

Consumer impact (what this means for users)

If you are a California resident, you have a legal right under CPRA to opt out of Headspace sharing your personal data (including health-adjacent data) with advertising partners, and to request deletion of all personal information Headspace holds about you.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Within 30 days
    California residents can submit a deletion request by emailing privacy@headspace.com. Include your account email and state that you are exercising your CPRA right to deletion. Headspace must respond within 45 days.

How other platforms handle this

TikTok Medium

Information You Provide may include sensitive personal information, as defined under applicable state privacy laws. We process such information in accordance with applicable law, such as to provide the Services and other permitted purposes under state privacy laws, like the California Consumer Priva...

Best Buy Medium

You have the right to opt out of the sale or sharing of your personal information. To exercise this right, you can click the 'Do Not Sell or Share My Personal Information' link available on our website, or submit a request through our privacy rights portal. We will process your opt-out request withi...

OpenAI Medium

Depending on where you live, you may have certain rights regarding your personal information, including: the right to know what personal information we have collected about you; the right to delete personal information we have collected from you; the right to correct inaccurate personal information;...

See all platforms with this clause type →

Monitoring

Headspace has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
You have the right to limit the use or disclosure of your sensitive personal information to only the uses necessary for us to provide goods or services to you. We will not use or disclose your sensitive personal information after you have exercised your right unless you subsequently provide consent for the use of your sensitive personal information for additional purposes. You have the right to opt-out of the sale and/or sharing of your personal information by a business.

— Excerpt from Headspace's Headspace Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

(1) REGULATORY FRAMEWORK: California Privacy Rights Act (CPRA, Cal. Civ. Code §§1798.100–1798.199) grants California residents rights to: opt out of sale/sharing (§1798.120), limit use of sensitive personal information (§1798.121), access (§1798.110), correction (§1798.106), deletion (§1798.105), and data portability (§1798.130). The California Privacy Protection Agency (CPPA) and California AG have joint enforcement authority. Sensitive personal information under CPRA includes health data, making Headspace's mental health data squarely within scope. (2)

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • State AG
    The California AG and California Privacy Protection Agency (CPPA) enforce CPRA rights including opt-out of sale/sharing and deletion of sensitive personal information.
    File a complaint →

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
HIPAA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Headspace Privacy Policy
Entity
Headspace
Document last updated
May 5, 2026
Tracking information
First tracked
April 1, 2026
Last verified
April 1, 2026
Record ID
CA-P-001136
Document ID
CA-D-00216
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
48761338090dd38db1c4ff45c1e9b8fb2d0d59e40cac2d4342a4e5d6bebb70c2
Analysis generated
April 1, 2026 15:17 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Headspace
Document: Headspace Privacy Policy
Record ID: CA-P-001136
Captured: 2026-04-01 15:17:25 UTC
SHA-256: 48761338090dd38d…
URL: https://conductatlas.com/platform/headspace/headspace-privacy-policy/california-cpra-sensitive-personal-information-and-opt-out-rights/
Accessed: May 20, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Headspace's California CPRA Sensitive Personal Information and Opt-Out Rights clause do?

This provision operationalizes statutory obligations under CPRA by establishing the mechanism through which consumers can restrict data usage to service delivery purposes and control commercial data transfer practices. The clause creates a framework where consumers may affirmatively exercise limitation and opt-out rights that Headspace must honor through its data handling procedures.

How does this clause affect you?

If you are a California resident, you have a legal right under CPRA to opt out of Headspace sharing your personal data (including health-adjacent data) with advertising partners, and to request deletion of all personal information Headspace holds about you.

Is ConductAtlas affiliated with Headspace?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.