If you live in California, you can email Hugging Face once a year to ask for a list of third parties that may have received your personal information for direct marketing purposes.
This analysis describes what Hugging Face's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision discloses a California-specific right to request information about third-party direct marketing data disclosures, exercisable once per year by email, which is a limited but actionable data transparency right for California residents.
California residents can email privacy@huggingface.co to request disclosure of any personal data shared with third parties for direct marketing; the policy states this right is exercisable once per calendar year.
How other platforms handle this
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
Monitoring
Hugging Face has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"California Civil Code Section 1798.83 also permits customers who are California residents to request certain information regarding Our disclosure of Personal Information to third parties for direct marketing purposes. To make such a request, please send an email to privacy@huggingface.co. Please note that the Company is only required to respond to one request per customer each year.— Excerpt from Hugging Face's Hugging Face Privacy Policy
REGULATORY LANDSCAPE: California Civil Code Section 1798.83 (the Shine the Light law) requires businesses that share personal information with third parties for direct marketing to disclose this upon request from California residents. This provision acknowledges that obligation. The policy does not address the broader CCPA or CPRA framework, including rights to know, delete, correct, or opt out of sale or sharing of personal information, which may also apply to California resident data. GOVERNANCE EXPOSURE: Medium. The disclosure of Section 1798.83 rights without a broader CCPA/CPRA rights framework suggests the policy may not fully address all California resident rights, particularly under CPRA which came into effect January 1, 2023, prior to this policy's effective date of March 28, 2023. JURISDICTION FLAGS: This provision applies exclusively to California residents. Organizations with California-based user populations should assess whether the policy's California privacy disclosures are complete under CPRA, including opt-out of sharing rights and sensitive personal information handling disclosures. CONTRACT AND VENDOR IMPLICATIONS: Businesses deploying Hugging Face for processing of California resident data should assess whether Hugging Face qualifies as a service provider under CPRA and whether appropriate contractual limitations are documented. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether the policy's California disclosures are complete under CPRA, which imposes additional obligations beyond Section 1798.83, including a privacy notice at collection, opt-out rights for sharing, and sensitive personal information use limitations.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision discloses a California-specific right to request information about third-party direct marketing data disclosures, exercisable once per year by email, which is a limited but actionable data transparency right for California residents.
California residents can email privacy@huggingface.co to request disclosure of any personal data shared with third parties for direct marketing; the policy states this right is exercisable once per calendar year.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hugging Face.