If you live in California, you have the right to know what personal data Medium holds about you, request that it be deleted, and opt out of Medium selling your data.
This analysis describes what Medium's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California law gives residents enforceable rights to control how their personal information is used and shared, including the right to stop Medium from selling their data to third parties.
California residents can formally request disclosure of the categories and specific pieces of personal information Medium has collected about them, and can ask for deletion of that data or opt out of its sale to third parties.
Cross-platform context
See how other platforms handle CCPA Rights for California Residents and similar clauses.
Compare across platforms →Monitoring
Medium has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA). These include the right to know about the personal information we collect, disclose, or sell; the right to request deletion of your personal information; and the right to opt out of the sale of your personal information.— Excerpt from Medium's Medium Privacy Policy
REGULATORY LANDSCAPE: This provision reflects rights established under the California Consumer Privacy Act (CCPA) and its amendment, the California Privacy Rights Act (CPRA). The California Privacy Protection Agency (CPPA) and the California Attorney General share enforcement authority. The CCPA requires businesses to disclose data collection categories, respond to deletion requests, and provide an accessible opt-out mechanism for data sales. GOVERNANCE EXPOSURE: Medium. The policy identifies CCPA rights but does not specify the opt-out mechanism's URL or accessibility pathway in the extracted text. CCPA requires a conspicuous 'Do Not Sell My Personal Information' link on the business's homepage. Non-compliance with opt-out requirements is a primary enforcement target of the California AG and CPPA. JURISDICTION FLAGS: Applies exclusively to California residents. Other US states with comprehensive privacy laws (Virginia VCDPA, Colorado CPA, Connecticut CTDPA) may create similar obligations that this policy does not explicitly address, potentially creating compliance gaps for users in those states. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers with California-based employees or end users should assess whether Medium's data practices create downstream CCPA obligations for them as businesses. Service agreements with Medium should address data handling in the context of CCPA compliance. COMPLIANCE CONSIDERATIONS: Legal teams should verify that Medium's CCPA opt-out mechanism is functional, prominently placed, and capable of processing requests within the 15-business-day timeframe required by law. The policy's data category disclosures should be audited against actual data collection practices. As CPRA took full effect in 2023, teams should also assess whether Medium's policy addresses the expanded rights introduced by CPRA, including the right to correct personal information.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California law gives residents enforceable rights to control how their personal information is used and shared, including the right to stop Medium from selling their data to third parties.
California residents can formally request disclosure of the categories and specific pieces of personal information Medium has collected about them, and can ask for deletion of that data or opt out of its sale to third parties.
ConductAtlas has identified this type of provision across 8 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Medium.