If you live in California, you can email Hugging Face once a year to ask for a list of third parties that may have received your personal information for direct marketing purposes.
This analysis describes what Hugging Face's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision implements a statutory disclosure requirement under California law, enabling residents to obtain information about third-party sharing practices related to direct marketing. The annual response limitation establishes the operational scope of the company's disclosure obligation under this statute.
California residents can email privacy@huggingface.co to request disclosure of any personal data shared with third parties for direct marketing; the policy states this right is exercisable once per calendar year.
Cross-platform context
See how other platforms handle California Resident Direct Marketing Disclosure Request and similar clauses.
Compare across platforms →Monitoring
Hugging Face has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"California Civil Code Section 1798.83 also permits customers who are California residents to request certain information regarding Our disclosure of Personal Information to third parties for direct marketing purposes. To make such a request, please send an email to privacy@huggingface.co. Please note that the Company is only required to respond to one request per customer each year.— Excerpt from Hugging Face's Hugging Face Privacy Policy
REGULATORY LANDSCAPE: California Civil Code Section 1798.83 (the Shine the Light law) requires businesses that share personal information with third parties for direct marketing to disclose this upon request from California residents. This provision acknowledges that obligation. The policy does not address the broader CCPA or CPRA framework, including rights to know, delete, correct, or opt out of sale or sharing of personal information, which may also apply to California resident data. GOVERNANCE EXPOSURE: Medium. The disclosure of Section 1798.83 rights without a broader CCPA/CPRA rights framework suggests the policy may not fully address all California resident rights, particularly under CPRA which came into effect January 1, 2023, prior to this policy's effective date of March 28, 2023. JURISDICTION FLAGS: This provision applies exclusively to California residents. Organizations with California-based user populations should assess whether the policy's California privacy disclosures are complete under CPRA, including opt-out of sharing rights and sensitive personal information handling disclosures. CONTRACT AND VENDOR IMPLICATIONS: Businesses deploying Hugging Face for processing of California resident data should assess whether Hugging Face qualifies as a service provider under CPRA and whether appropriate contractual limitations are documented. COMPLIANCE CONSIDERATIONS: Legal teams should assess whether the policy's California disclosures are complete under CPRA, which imposes additional obligations beyond Section 1798.83, including a privacy notice at collection, opt-out rights for sharing, and sensitive personal information use limitations.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision implements a statutory disclosure requirement under California law, enabling residents to obtain information about third-party sharing practices related to direct marketing. The annual response limitation establishes the operational scope of the company's disclosure obligation under this statute.
California residents can email privacy@huggingface.co to request disclosure of any personal data shared with third parties for direct marketing; the policy states this right is exercisable once per calendar year.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Hugging Face.