California residents have legally enforceable rights to access, delete, correct, and opt out of the sale or sharing of their personal data, and can limit how Lyft uses sensitive data categories like location.
This analysis describes what Lyft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes Lyft's obligations under California privacy law (CCPA/CPRA) to honor consumer requests for data access, deletion, correction, and opt-outs. The clause identifies the specific categories of rights that Lyft must operationalize through its privacy infrastructure and consumer request processes.
California residents can exercise five distinct privacy rights under CCPA/CPRA including the right to opt out of advertising data sharing, which is a concrete and actionable protection that must be honored by Lyft within legally specified timeframes.
How other platforms handle this
If you are a California resident, you have specific rights under the California Consumer Privacy Act and California Privacy Rights Act. These rights include the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing...
If you are a California resident, you have certain rights with respect to your personal information under the California Consumer Privacy Act (CCPA). These rights include the right to know about the personal information we collect, use, disclose, and sell; the right to request deletion of your perso...
Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the rig...
Monitoring
Lyft has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have the right to know what personal information we collect about you, to request deletion of your personal information, to opt out of the sale or sharing of your personal information, to correct inaccurate personal information, and to limit our use and disclosure of your sensitive personal information.— Excerpt from Lyft's Lyft Privacy Policy
REGULATORY LANDSCAPE: These rights derive from the California Consumer Privacy Act as amended by the California Privacy Rights Act, enforced by the California Privacy Protection Agency and the California AG. CPRA expanded CCPA to include rights to correction and to limit sensitive personal information use. Non-compliance with consumer rights requests within the statutory timeframe (45 days, extendable by 45 days) can result in civil penalties of up to $7,500 per intentional violation. GOVERNANCE EXPOSURE: Medium. The provision states these rights exist but compliance depends on whether Lyft's request fulfillment processes, including verification procedures and response timelines, satisfy CPRA's operational requirements. The inclusion of sensitive personal information limitations is particularly significant given Lyft's collection of precise location and biometric data. JURISDICTION FLAGS: California is the primary jurisdiction. Analogous rights exist under Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and other state comprehensive privacy laws, though the specific rights enumerated and enforcement mechanisms differ. CONTRACT AND VENDOR IMPLICATIONS: Service providers receiving California consumer data must honor Lyft's obligations to fulfill consumer rights requests, including deletion requests. Vendor contracts should include provisions requiring service providers to assist with rights request fulfillment and to delete data upon Lyft's instruction. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the rights request intake process at https://privacy.lyft.com is functional, that identity verification procedures are not unduly burdensome, and that response timelines comply with CPRA's requirements. The opt-out mechanism for sharing of personal information for cross-context behavioral advertising should be confirmed as technically operational and honored within the required timeframe.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes Lyft's obligations under California privacy law (CCPA/CPRA) to honor consumer requests for data access, deletion, correction, and opt-outs. The clause identifies the specific categories of rights that Lyft must operationalize through its privacy infrastructure and consumer request processes.
California residents can exercise five distinct privacy rights under CCPA/CPRA including the right to opt out of advertising data sharing, which is a concrete and actionable protection that must be honored by Lyft within legally specified timeframes.
ConductAtlas has identified this type of provision across 10 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Lyft.