Certain financial information Robinhood holds as a regulated financial institution is governed by federal banking privacy law rather than California's privacy law, which means California residents cannot use CCPA rights such as opt-out, deletion, or access for that portion of their data.
This analysis describes what Robinhood's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision limits the scope of CCPA rights available to California residents over a significant category of financial data Robinhood collects, including brokerage and account information covered by GLBA.
Interpretive note: The precise boundary of which Robinhood data categories fall under GLBA versus CCPA depends on the product and data type involved, and regulatory guidance on the exemption's scope continues to evolve.
The updated privacy policy reorganizes how Robinhood discloses its handling of financial information, now grouping GLBA-regulated disclosures by individual service entity with updated reference links rather than listing all entities in a single section. The policy also removed coverage of Robinhood Social, meaning privacy practices for that social media product are no longer described in this statement. The revised policy clarifies that it applies when you are logged into services or interact through online customer service channels, and directs users to a separate Robinhood Markets US Online Privacy Statement for information about non-financial data collection practices.
View change record →Expanded from CCPA-only exemption to broader state privacy law exemptions with nuanced explanation that exemption applies conditionally based on relationship type (personal financial services vs. other services).
View full change record →California residents who attempt to exercise CCPA opt-out, deletion, or access rights over their brokerage account data, transaction history, or other GLBA-covered financial information may find those rights do not apply to that subset of data under Robinhood's stated policy.
How other platforms handle this
You may contact our privacy team with any requests of disclosure, correction, or deletion of your personal information. You may also request suspension of use or suspension of sharing of your personal information with certain third parties.
When you use them, we'll validate your request by verifying your identity (for example, by confirming that you're signed in to your Google Account).
By providing your mobile phone number, you consent to receive automated text (SMS) messages from Instacart...To opt out, reply STOP. For help, reply HELP or contact us directly...
"We are required by the Gramm-Leach-Bliley Act (GLBA) to provide you with a separate privacy notice that describes our information sharing practices for certain personal information we hold as a financial institution. Personal information that is subject to the GLBA is exempt from the California Consumer Privacy Act (CCPA).Excerpt from Robinhood's Privacy Policy
1) REGULATORY LANDSCAPE: This provision directly implicates the Gramm-Leach-Bliley Act, enforced by the CFPB, SEC, and FINRA for broker-dealer entities, and the CCPA as amended by CPRA, enforced by the California Privacy Protection Agency (CPPA) …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision limits the scope of CCPA rights available to California residents over a significant category of financial data Robinhood collects, including brokerage and account information covered by GLBA.
California residents who attempt to exercise CCPA opt-out, deletion, or access rights over their brokerage account data, transaction history, or other GLBA-covered financial information may find those rights do not apply to that subset of data under Robinhood's stated policy.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Robinhood.