Provision record
Headspace · Headspace Privacy Policy · View original document ↗

California CPRA Sensitive Personal Information and Opt-Out Rights

High severity Common · 290 of 352 platforms
Stay ahead of the changes
Track Headspace and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

California residents have the right to opt out of the sale or sharing of their personal information, limit the use of sensitive personal information (including health data), and request access, correction, or deletion of their data under the California Privacy Rights Act.

This analysis describes what Headspace's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision operationalizes statutory obligations under CPRA by establishing the mechanism through which consumers can restrict data usage to service delivery purposes and control commercial data transfer practices. The clause creates a framework where consumers may affirmatively exercise limitation and opt-out rights that Headspace must honor through its data handling procedures.

Clause Stability Stable

0
Changes
5
Months Monitored
Apr 3, 2026
First Seen
Apr 17, 2026
Last Seen
This clause type exists across 5149 other provisions on other platforms.

Change history

removed Jun 24, 2026

Removal of CPRA-specific provision suggests consolidation into jurisdiction-neutral 'User Privacy Rights and Data Subject Requests' provision rather than state-specific enumeration.

View full change record →

Consumer impact (what this means for users)

If you are a California resident, you have a legal right under CPRA to opt out of Headspace sharing your personal data (including health-adjacent data) with advertising partners, and to request deletion of all personal information Headspace holds about you.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Within 30 days
    California residents can submit a deletion request by emailing privacy@headspace.com. Include your account email and state that you are exercising your CPRA right to deletion. Headspace must respond within 45 days.

How other platforms handle this

Notion Medium

To opt out of the offline disclosure of your information to third parties for these purposes, please email us at privacy@makenotion.com.

Tinder Medium

If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.

Instacart Medium

By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
You have the right to limit the use or disclosure of your sensitive personal information to only the uses necessary for us to provide goods or services to you. We will not use or disclose your sensitive personal information after you have exercised your right unless you subsequently provide consent for the use of your sensitive personal information for additional purposes. You have the right to opt-out of the sale and/or sharing of your personal information by a business.

Excerpt from Headspace's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

(1) REGULATORY FRAMEWORK: California Privacy Rights Act (CPRA, Cal.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • State Attorney General
    State AGs in California, New York, Texas, and other states can investigate violations of state consumer protection and privacy laws, including CCPA (California), SHIELD Act (New York), and equivalents.
    Who can file: Residents of states with comprehensive privacy laws — primarily California, Virginia, Colorado, Connecticut, and Utah
    What you need: Evidence of the violation, explanation of how your state rights were affected, and your account or contact information with the company
    What to expect: Outcomes vary by state. May result in investigation, enforcement action, or requirement for the company to change practices. No direct individual compensation in most cases.

    Search "[your state] attorney general consumer complaint" to find your state's direct complaint form

Applicable regulations

CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
HIPAA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Headspace Privacy Policy
Entity
Headspace
Document last updated
May 5, 2026
Tracking information
First tracked
April 1, 2026
Last verified
April 1, 2026
Record ID
CA-P-001136
Document ID
CA-D-00216
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
48761338090dd38db1c4ff45c1e9b8fb2d0d59e40cac2d4342a4e5d6bebb70c2
Analysis generated
April 1, 2026 15:17 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Headspace
Document: Headspace Privacy Policy
Record ID: CA-P-001136
Captured: 2026-04-01 15:17:25 UTC
SHA-256: 48761338090dd38d…
URL: https://conductatlas.com/platform/headspace/headspace-privacy-policy/provision/CA-P-001136/california-cpra-sensitive-personal-information-and-opt-out-rights/
Accessed: Sept. 8, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Headspace's California CPRA Sensitive Personal Information and Opt-Out Rights clause do?

This provision operationalizes statutory obligations under CPRA by establishing the mechanism through which consumers can restrict data usage to service delivery purposes and control commercial data transfer practices. The clause creates a framework where consumers may affirmatively exercise limitation and opt-out rights that Headspace must honor through its data handling procedures.

How does this clause affect you?

If you are a California resident, you have a legal right under CPRA to opt out of Headspace sharing your personal data (including health-adjacent data) with advertising partners, and to request deletion of all personal information Headspace holds about you.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.

Is ConductAtlas affiliated with Headspace?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Headspace.