If you live in California, you can ask One Identity what data it has on you, request deletion or correction of that data, and opt out of One Identity selling or sharing your data with other companies.
This analysis describes what OneLogin's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This clause documents OneLogin's acknowledgment of mandatory California privacy law obligations. The provision operationalizes CCPA/CPRA requirements by explicitly recognizing resident entitlements to data subject access, deletion, correction, and opt-out mechanisms, establishing the legal framework governing OneLogin's handling of California resident data.
The updated policy discloses that OneLogin may record calls with consent and use AI to analyze call transcripts, chat conversations, and sales emails for multiple purposes including follow-up task identification, call summarization, sales analytics, communication effectiveness analysis, and forecast modeling. Under the revised terms, recorded call audio and video may be reviewed for employee training, monitoring, and coaching purposes. The policy also states that OneLogin will save chat and call conversation data to inform future interactions. These practices apply when you communicate with OneLogin via phone calls, chat, email, text, or other teleconference solutions. You should review the updated disclosure to understand how your communication data will be processed and retained.
View change record →The updated policy removes explicit language describing how OneLogin uses AI to analyze customer communications. Previously, the policy stated that call audio and video would be recorded with consent and analyzed using AI to identify follow-up tasks, summarize calls, and conduct sales analytics; that chatbot conversations would be analyzed and saved; and that sales emails would be analyzed to determine communication efficacy and forecast next steps. These specific AI analysis practices are no longer described in the updated policy. The revised language also narrows one stated data use purpose, changing 'answers or services you have asked or licensed' to 'services you have purchased.' No consumer opt-out mechanisms or alternative disclosures are provided in the change text.
View change record →This California-specific provision was replaced with a more generic 'GDPR and CCPA' provision, potentially reducing specificity about CCPA/CPRA rights such as the right to opt-out of 'sale or sharing' which are legally distinct under California law.
View full change record →As a California resident, you can submit a verifiable request to access, delete, or correct your personal data held by One Identity, and you can opt out of data sharing with third-party advertising and marketing partners — these rights are legally enforceable under CPRA.
How other platforms handle this
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
Monitoring
OneLogin has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have the right to know what personal information we collect about you, the right to delete personal information we have collected from you, the right to correct inaccurate personal information, the right to opt-out of the sale or sharing of your personal information, and the right not to be discriminated against for exercising these rights.— Excerpt from OneLogin's OneLogin Privacy Policy
REGULATORY FRAMEWORK: California Consumer Privacy Act (CCPA) Cal. Civ. Code §1798.100 et seq., as amended by CPRA (Proposition 24, effective Jan. 1, 2023), grants California residents rights to know (§1798.110), delete (§1798.105), correct (§1798.106), opt-out of sale/sharing (§1798.120), and non-discrimination (§1798.125). The California Privacy Protection Agency (CPPA) and California AG jointly enforce CPRA. Sensitive personal information (SPI) categories under CPRA §1798.121 may apply to login credential and device data processed by One Identity's IAM platform.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This clause documents OneLogin's acknowledgment of mandatory California privacy law obligations. The provision operationalizes CCPA/CPRA requirements by explicitly recognizing resident entitlements to data subject access, deletion, correction, and opt-out mechanisms, establishing the legal framework governing OneLogin's handling of California resident data.
As a California resident, you can submit a verifiable request to access, delete, or correct your personal data held by One Identity, and you can opt out of data sharing with third-party advertising and marketing partners — these rights are legally enforceable under CPRA.
ConductAtlas has identified this type of provision across 17 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OneLogin.