Provision record
OneLogin · OneLogin Privacy Policy · View original document ↗

Data Subject Rights and Complaint Mechanisms

Low severity High confidence Explicit document language Unique · 0 of 352 platforms
Stay ahead of the changes
Track OneLogin and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
Document Record

What it is

The policy establishes data subject rights including access, rectification, erasure, restriction, portability, objection, and the right not to be subject to automated decision-making, accessible via a web form, email, or phone. It also provides a free third-party dispute resolution mechanism through TrustArc and a right to lodge complaints with supervisory authorities.

This analysis describes what OneLogin's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision operationalizes GDPR and CCPA/CPRA data subject rights through a unified request mechanism and provides an alternative dispute resolution pathway via TrustArc in addition to supervisory authority complaints. The policy states Quest does not currently engage in automated decision-making on its websites or products.

Recent Activity

This document changed recently

Medium May 6, 2026

The updated policy discloses that OneLogin may record calls with consent and use AI to analyze call transcripts, chat conversations, and sales emails for multiple purposes including follow-up task identification, call summarization, sales analytics, communication effectiveness analysis, and forecast modeling. Under the revised terms, recorded call audio and video may be reviewed for employee training, monitoring, and coaching purposes. The policy also states that OneLogin will save chat and call conversation data to inform future interactions. These practices apply when you communicate with OneLogin via phone calls, chat, email, text, or other teleconference solutions. You should review the updated disclosure to understand how your communication data will be processed and retained.

View change record →
High May 5, 2026

The updated policy removes explicit language describing how OneLogin uses AI to analyze customer communications. Previously, the policy stated that call audio and video would be recorded with consent and analyzed using AI to identify follow-up tasks, summarize calls, and conduct sales analytics; that chatbot conversations would be analyzed and saved; and that sales emails would be analyzed to determine communication efficacy and forecast next steps. These specific AI analysis practices are no longer described in the updated policy. The revised language also narrows one stated data use purpose, changing 'answers or services you have asked or licensed' to 'services you have purchased.' No consumer opt-out mechanisms or alternative disclosures are provided in the change text.

View change record →

Clause Stability Stable

0
Changes
3
Months Monitored
Jul 9, 2026
First Seen
Jul 9, 2026
Last Seen

Consumer impact (what this means for users)

Under these terms, individuals can request access, deletion, rectification, restriction, portability, or objection to processing via the web form at https://oneidentity.com/legal/preferences.aspx, by email at privacy@quest.com, or by calling 1-888-820-4606. The policy states requests will be responded to within 30 days and that a free dispute resolution mechanism is available at https://feedback-form.truste.com/watchdog/request.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Visit the preferences page and complete the data subject request form. Quest will send an authentication email; confirm authentication to begin processing. Results are communicated via a final email upon completion. Alternatively, call 1-888-820-4606.
  • Export Your Data
    Submit a data access or portability request via the preferences page form. Authenticate via the confirmation email. Quest states it will respond within 30 days.

Cross-platform context

See how other platforms handle Data Subject Rights and Complaint Mechanisms and similar clauses.

Compare across platforms →
▸ View Original Clause Language DOCUMENT RECORD
"
If you would like to exercise any of your rights, or receive more information about them, please contact us via "https://oneidentity.com/legal/preferences.aspx". We promptly respond to all requests from individuals seeking to exercise their rights described in this Privacy Policy and pursuant to applicable data protection laws. Please note that some of the following rights may not be applicable to your situation... If you are unsatisfied with the way we treat your Personal Data, you may reach out to us via email at privacy@quest.com to discuss the issue. However, you always have the right to lodge a complaint to our third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request or to a supervisory authority.

Excerpt from OneLogin's Privacy Policy

ConductAtlas Analysis

Institutional analysis (regulatory & governance intelligence)

1.

Insight

Unlock the full institutional analysis

Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.

Applicable agencies

  • Federal Trade Commission (ftc)
    Oversees unfair or deceptive business practices and can investigate companies that mislead consumers about data collection, sharing, or use.
    Who can file: Anyone affected by the company's practices (US or international)
    What you need: Your account details, a timeline of relevant events, and a description of the specific issue
    What to expect: Complaints inform FTC enforcement priorities and investigations but do not result in individual resolution or compensation
    File a complaint →

Provision details

Document information
Document
OneLogin Privacy Policy
Entity
OneLogin
Document last updated
May 5, 2026
Tracking information
First tracked
May 10, 2026
Last verified
July 9, 2026
Record ID
CA-P-016304
Document ID
CA-D-00694
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
632189e2a9ad8217101dfa942396127b2a6421e5aa908b71324036c3925e9a3a
Analysis generated
May 10, 2026 01:37 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: OneLogin
Document: OneLogin Privacy Policy
Record ID: CA-P-016304
Captured: 2026-05-10 01:37:12 UTC
SHA-256: 632189e2a9ad8217…
URL: https://conductatlas.com/platform/onelogin/onelogin-privacy-policy/provision/CA-P-016304/data-subject-rights-and-complaint-mechanisms/
Accessed: Aug. 11, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Low
Categories

Other risks in this policy

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does OneLogin's Data Subject Rights and Complaint Mechanisms clause do?

This provision operationalizes GDPR and CCPA/CPRA data subject rights through a unified request mechanism and provides an alternative dispute resolution pathway via TrustArc in addition to supervisory authority complaints. The policy states Quest does not currently engage in automated decision-making on its websites or products.

How does this clause affect you?

Under these terms, individuals can request access, deletion, rectification, restriction, portability, or objection to processing via the web form at https://oneidentity.com/legal/preferences.aspx, by email at privacy@quest.com, or by calling 1-888-820-4606. The policy states requests will be responded to within 30 days and that a free dispute resolution mechanism is available at https://feedback-form.truste.com/watchdog/request.

Is ConductAtlas affiliated with OneLogin?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OneLogin.