Provision record
Okta · Okta Privacy Policy · View original document ↗

GDPR Individual Rights for EEA, UK, and Swiss Residents

Low severity High confidence Explicit document language Common · 290 of 352 platforms
Stay ahead of the changes
Track Okta and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

If you are in the EU, UK, or Switzerland, you have the right to access, correct, delete, or move your personal data held by Okta, and to object to or restrict how it is used.

ⓘ

This analysis describes what Okta's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

These rights give EU, UK, and Swiss residents meaningful control over their personal data held by Okta in its capacity as controller, including the ability to request deletion of marketing profiles or opt out of data processing based on legitimate interests.

Consumer impact (what this means for users)

EU, UK, and Swiss residents can exercise GDPR rights directly against Okta Ireland Limited for data collected through okta.com and marketing activities; however, these rights do not extend to data processed by Okta on behalf of enterprise customers, which requires separate engagement with the relevant employer or service provider.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Submit a data subject request (access, correction, deletion, or portability) through Okta's privacy rights portal. Okta is required to respond within one month under GDPR. Specify that your request concerns Okta's controller-role data from website or marketing interactions.

How other platforms handle this

ZipRecruiter Medium

you may also have the right to: (i) opt out of processing of Personal Data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects...and (iii) appeal any decision by ZipRecruiter...

Glassdoor Medium

EU, UK, and Swiss individuals have the right to obtain our confirmation of whether we maintain personal information relating to you in the United States. Upon request, we will provide you with access to the personal information that we hold about you.

Square Medium

You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have certain rights under applicable data protection law with respect to personal information that Okta processes as a data controller, including the right to access, correct, update, or request deletion of your personal information, the right to object to processing, the right to restrict processing, and the right to data portability.

Excerpt from Okta's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

REGULATORY LANDSCAPE: This provision directly implements GDPR Chapter III individual rights (Articles 15-22), UK GDPR equivalents, and Swiss FADP rights.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
Universal Opt-Out Mechanism Expansion 2026
US
VPPA
United States Federal

Provision details

Document information
Document
Okta Privacy Policy
Entity
Okta
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
May 10, 2026
Record ID
CA-P-008607
Document ID
CA-D-00690
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
2c41898c161e33c56a4d696c23462f40793f348428c982d661e3c8a2a0ceec19
Analysis generated
May 10, 2026 08:45 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Okta
Document: Okta Privacy Policy
Record ID: CA-P-008607
Captured: 2026-05-10 08:45:28 UTC
SHA-256: 2c41898c161e33c5…
URL: https://conductatlas.com/platform/okta/okta-privacy-policy/provision/CA-P-008607/gdpr-individual-rights-for-eea-uk-and-swiss-residents/
Accessed: Sept. 26, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Okta's GDPR Individual Rights for EEA, UK, and Swiss Residents clause do?

These rights give EU, UK, and Swiss residents meaningful control over their personal data held by Okta in its capacity as controller, including the ability to request deletion of marketing profiles or opt out of data processing based on legitimate interests.

How does this clause affect you?

EU, UK, and Swiss residents can exercise GDPR rights directly against Okta Ireland Limited for data collected through okta.com and marketing activities; however, these rights do not extend to data processed by Okta on behalf of enterprise customers, which requires separate engagement with the relevant employer or service provider.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.

Is ConductAtlas affiliated with Okta?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Okta.