The policy states that California residents hold rights under CCPA to know about, delete, and opt out of the sale of their personal information, and have a right to non-discrimination for exercising these rights, with opt-out available via a designated link.
This analysis describes what Medium's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the operational mechanisms through which California residents can exercise CCPA and CPRA rights, including the opt-out of data sale or sharing, which is a concrete and time-sensitive entitlement available to a defined user population.
Added explicit mention of the right to non-discrimination for exercising privacy rights, which is a key CCPA provision previously omitted.
View full change record →The agreement establishes that California residents can request disclosure, deletion, or cessation of sale or sharing of their personal information, and that exercising these rights may not result in discriminatory treatment such as denial of service or pricing differences.
How other platforms handle this
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, delete, or port your data. EU and UK users may also have the right to object to or restrict certain processing. California residents may have the right to know, delete, corre...
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
Monitoring
Medium has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including the right to know about personal information collected, disclosed, or sold; the right to delete personal information; the right to opt-out of the sale of your personal information; and the right to non-discrimination for exercising your privacy rights.— Excerpt from Medium's Medium Privacy Policy
1. REGULATORY LANDSCAPE: The California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA, effective January 1, 2023) requires businesses meeting applicable thresholds to honor the described rights. The California Privacy Protection Agency (CPPA) and California Attorney General have enforcement authority. The policy's reference to the right to opt out of 'sale' should be evaluated against CPRA's expanded definition of 'sharing' for cross-context behavioral advertising. 2. GOVERNANCE EXPOSURE: Medium. The policy's CCPA disclosures must accurately reflect Medium's current data practices, including whether data is 'shared' for cross-context behavioral advertising under CPRA's expanded definition, not merely 'sold' under the original CCPA definition. Any gap between disclosed and actual practices creates enforcement exposure. 3. JURISDICTION FLAGS: California residents have primary exposure. Other US states with comprehensive privacy laws (Virginia CDPA, Colorado CPA, Connecticut CTDPA) may create parallel rights obligations not explicitly addressed in this policy. 4. CONTRACT AND VENDOR IMPLICATIONS: Organizations that are California-covered businesses and use Medium as a service provider should confirm that Medium's CCPA service provider or contractor agreements are in place and that Medium does not retain, use, or disclose personal information outside the business purpose for which it was shared. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that Medium's opt-out mechanism is accessible, functional, and honored within the CCPA-required 15-business-day response period. CPRA updates require that 'sharing' for cross-context behavioral advertising be included in opt-out mechanisms, and legal teams should confirm that Medium's opt-out link covers both sale and sharing as defined under CPRA.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the operational mechanisms through which California residents can exercise CCPA and CPRA rights, including the opt-out of data sale or sharing, which is a concrete and time-sensitive entitlement available to a defined user population.
The agreement establishes that California residents can request disclosure, deletion, or cessation of sale or sharing of their personal information, and that exercising these rights may not result in discriminatory treatment such as denial of service or pricing differences.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Medium.