Depending on where you live, you can ask Okta to show you, fix, delete, or transfer your personal data, and opt out of having it sold or shared. You submit these requests through Okta's online privacy portal.
This analysis describes what Okta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are legally enforceable under GDPR and CCPA, but their practical value depends on Okta's response times and whether the controller/processor distinction limits what Okta will act on for enterprise end-users.
You have the right to delete, access, correct, or export your personal data held by Okta, and California residents can opt out of data sharing for advertising purposes — but if you primarily use Okta through your employer, Okta may redirect your request to your company instead.
How other platforms handle this
In addition to the above rights, your local laws (including those in the EU, UK, Japan, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Virginia, or Utah) may afford you f...
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
Depending on where you live, you may have certain rights with respect to your personal information. These rights may include: The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected i...
Monitoring
Okta has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Depending on your location and subject to applicable law, you may have the following rights with regard to your personal information: the right to access your personal information; the right to correct inaccuracies in your personal information; the right to request the deletion of your personal information; the right to object to or restrict the processing of your personal information; the right to receive your personal information in a portable format; the right to opt-out of the sale or sharing of your personal information; and the right to not be discriminated against for exercising your privacy rights. To submit a privacy request, please visit our Privacy Request Portal.— Excerpt from Okta's Okta Privacy Policy
(1) REGULATORY FRAMEWORK: This provision implicates GDPR Arts. 15-22 (data subject rights: access, rectification, erasure, restriction, portability, objection, automated decision-making); CCPA §§1798.100, 1798.105, 1798.106, 1798.110, 1798.115, 1798.120 (consumer rights); UK GDPR equivalent provisions; and Brazil LGPD Arts. 17-22. The CPPA, EU DPAs, UK ICO, and FTC (for deceptive denial of rights) have enforcement authority. (2)
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights are legally enforceable under GDPR and CCPA, but their practical value depends on Okta's response times and whether the controller/processor distinction limits what Okta will act on for enterprise end-users.
You have the right to delete, access, correct, or export your personal data held by Okta, and California residents can opt out of data sharing for advertising purposes — but if you primarily use Okta through your employer, Okta may redirect your request to your company instead.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Okta.