The policy states that California residents hold rights under CCPA to know about, delete, and opt out of the sale of their personal information, and have a right to non-discrimination for exercising these rights, with opt-out available via a designated link.
This analysis describes what Medium's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational mechanisms through which California residents can exercise CCPA and CPRA rights, including the opt-out of data sale or sharing, which is a concrete and time-sensitive entitlement available to a defined user population.
The updated policy states that Medium and its vendors may scan, analyze, and review your content, messages, AI interactions, and associated metadata. Data sharing now explicitly includes information you submitted or posted through the service, extending beyond infrastructure support to machine learning model training and improvement. The policy does not indicate an opt-out mechanism or granular user control over this specific use of content.
View change record →Current version explicitly states 'Medium does not sell your personal information' but reserves the right to do so in the future, a significant change from the previous version's straightforward CCPA rights description.
View full change record →Added explicit mention of the right to non-discrimination for exercising privacy rights, which is a key CCPA provision previously omitted.
View full change record →The agreement establishes that California residents can request disclosure, deletion, or cessation of sale or sharing of their personal information, and that exercising these rights may not result in discriminatory treatment such as denial of service or pricing differences.
How other platforms handle this
California residents have the right to request certain information regarding our disclosure of personal information...to third parties for their direct marketing purposes unless we provide them with an ability to exercise choice regarding such disclosures.
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
To opt out of the offline disclosure of your information to third parties for these purposes, please email us at privacy@makenotion.com.
"If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including the right to know about personal information collected, disclosed, or sold; the right to delete personal information; the right to opt-out of the sale of your personal information; and the right to non-discrimination for exercising your privacy rights.Excerpt from Medium's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes the operational mechanisms through which California residents can exercise CCPA and CPRA rights, including the opt-out of data sale or sharing, which is a concrete and time-sensitive entitlement available to a defined user population.
The agreement establishes that California residents can request disclosure, deletion, or cessation of sale or sharing of their personal information, and that exercising these rights may not result in discriminatory treatment such as denial of service or pricing differences.
ConductAtlas has identified this type of provision across 289 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Medium.