What can I do about this clause?

{'method': 'EMAIL', 'recipient': 'privacy@noom.com', 'difficulty': 'EASY', 'action_type': 'EXPORT_DATA', 'instructions': 'Email privacy@noom.com requesting a copy of all personal data Noom holds about you, including health data, behavioral data, and any data shared with third parties. Under GDPR and CCPA, Noom must respond within 30-45 days.', 'deadline_days': None, 'deadline_hours': None}

Which regulatory agencies enforce this type of clause?

{'agency': 'State_AG', 'reason': 'State Attorneys General in California and other states with comprehensive privacy laws have enforcement authority over violations of consumer data rights including access, deletion, and portability.', 'complaint_url': 'https://www.naag.org/find-my-ag/'}

What is the severity of this clause?

ConductAtlas classifies this User Rights — Access, Correction, Deletion, Portability clause as medium severity. Severity reflects the magnitude of rights affected, the breadth of users impacted, and the degree of discretion the platform retains.

User Rights — Access, Correction, Deletion, Portability — Noom

Share 𝕏 Share in Share 🔒 PDF

What it is

Depending on your location, you have rights to see, correct, delete, and download your personal data that Noom holds, and to object to how Noom processes it.

Consumer impact (what this means for users)

EU, UK, and California users have legally enforceable rights to access, correct, delete, and export the health data Noom holds, while users in other states or countries may have more limited or no enforceable rights to control their data.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.

Export Your Data

Email privacy@noom.com requesting a copy of all personal data Noom holds about you, including health data, behavioral data, and any data shared with third parties. Under GDPR and CCPA, Noom must respond within 30-45 days.

Cross-platform context

See how other platforms handle User Rights — Access, Correction, Deletion, Portability and similar clauses.

Compare across platforms →

Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Knowing your data rights means you can request a copy of all health data Noom holds about you, correct errors, or demand deletion — but the rights available to you depend on where you live, with EU and California users having the strongest protections.

View original clause language

Depending on where you live, you may have certain rights regarding your personal information, including: the right to access the personal information we hold about you; the right to correct inaccurate personal information; the right to request deletion of your personal information; the right to data portability; the right to object to or restrict the processing of your personal information; and the right to withdraw consent where we process your personal information based on consent.

Institutional analysis (Compliance & legal intelligence)

1. REGULATORY FRAMEWORK: Data subject rights are governed by GDPR Arts. 15-22 (access, rectification, erasure, restriction, portability, objection — all enforceable with 30-day response deadline under Art. 12); CCPA/CPRA §§1798.100-1798.125 (access, deletion, correction, portability rights for California residents); UK GDPR (equivalent rights to EU GDPR post-Brexit); and various US state privacy laws (CO CPA, CT CTDPA, VA VCDPA, TX TDPSA). Enforcement authorities: EU DPAs, ICO, CPPA, State AGs. 2.

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

State AG

State Attorneys General in California and other states with comprehensive privacy laws have enforcement authority over violations of consumer data rights including access, deletion, and portability.
File a complaint →

Provision details

Document information

Document

Noom Privacy Policy

Entity

Noom

Document last updated

April 29, 2026

Tracking information

First tracked

April 28, 2026

Last verified

April 28, 2026

Record ID

CA-P-003847

Document ID

CA-D-00397

Evidence Provenance

Source URL

https://www.noom.com/noom-privacy-policy/

Wayback Machine

View archived versions →

SHA-256

05252f553ca6864667d2e582f332534d7ecc993e8e01284deda5add6a0607bb0

Verified

✓ Snapshot stored ✓ Change verified

How to Cite

ConductAtlas Policy Archive
Entity: Noom | Document: Noom Privacy Policy | Record: CA-P-003847
Captured: 2026-04-28 06:52:27 UTC | SHA-256: 05252f553ca68646…
URL: https://conductatlas.com/platform/noom/noom-privacy-policy/user-rights-access-correction-deletion-portability/
Accessed: May 2, 2026

Classification

Severity

Medium

User Rights — Access, Correction, Deletion, Portability