If you live in California, you have legal rights to see what data Midjourney has about you, ask for it to be deleted, and opt out of your data being sold or shared, and Midjourney cannot penalize you for exercising these rights.
This analysis describes what Midjourney's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California residents have specific enforceable legal rights over their personal data that go beyond what Midjourney provides to users in other US states, including the ability to request deletion and opt out of data sharing.
The updated privacy policy removed language describing how Midjourney shares personal data, the security measures protecting that data, children's privacy safeguards, procedures for notifying users o…
California residents can formally request to know, delete, or opt out of the sale or sharing of their personal data with Midjourney, providing a concrete legal mechanism to limit how their information, including prompts and usage data, is used.
Cross-platform context
See how other platforms handle User Rights for California Residents (CCPA) and similar clauses.
Compare across platforms →Monitoring
Midjourney has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you may have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): the right to know about the personal information we collect, disclose, or sell; the right to delete personal information we have collected about you; the right to opt out of the sale or sharing of your personal information; and the right to non-discrimination for exercising your rights.— Excerpt from Midjourney's Midjourney Privacy Policy
REGULATORY LANDSCAPE: This provision engages the CCPA as amended by the CPRA, enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General. The right to opt out of sale or sharing is directly relevant to Midjourney's data sharing with business partners for marketing purposes. Compliance with CCPA requires that opt-out mechanisms be functional, prominent, and honored within 15 business days of a request. GOVERNANCE EXPOSURE: Medium. The policy asserts CCPA rights but does not describe the specific mechanism by which California residents can submit requests, which is an operational detail that compliance teams should verify in the live product experience. The adequacy of Midjourney's opt-out mechanism for data sharing is a key compliance question. JURISDICTION FLAGS: This provision applies specifically to California residents and does not extend rights to users in other US states by its terms, though other states including Virginia, Colorado, and Connecticut have enacted comparable privacy laws that may require similar disclosures and rights for their residents. CONTRACT AND VENDOR IMPLICATIONS: Organizations with California-based employees using Midjourney should assess whether employee data processed through the service requires CCPA-compliant handling and whether Midjourney qualifies as a service provider or third party under the CPRA distinction. COMPLIANCE CONSIDERATIONS: Legal teams should verify that Midjourney's Data Subject Access Request process for California residents is operationally functional and that response timelines comply with CCPA requirements. The scope of the opt-out right as it applies to AI training data use, not just marketing sharing, should be clarified with Midjourney directly.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California residents have specific enforceable legal rights over their personal data that go beyond what Midjourney provides to users in other US states, including the ability to request deletion and opt out of data sharing.
California residents can formally request to know, delete, or opt out of the sale or sharing of their personal data with Midjourney, providing a concrete legal mechanism to limit how their information, including prompts and usage data, is used.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Midjourney.