California residents have specific legal rights including the ability to see what data Smartsheet has about them, request deletion, correct inaccuracies, and opt out of having their data sold or shared with advertising partners.
This analysis describes what Smartsheet's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California's CCPA and CPRA provide among the strongest consumer data rights in the US, and Smartsheet's explicit acknowledgment of these rights means California residents have enforceable mechanisms to limit data sharing and request data deletion.
California residents can exercise rights including deletion, access, correction, and opt-out from data sharing for advertising purposes by submitting a request through Smartsheet's privacy request form, which Smartsheet is legally required to honor within specific timeframes under California law.
How other platforms handle this
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) and related regulations, including the right to know what personal information we collect and how it is used, the right to request deletion of your personal information, the right to opt out of...
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
California law gives residents the right to know what personal information we collect, use, share or sell; to delete personal information under certain circumstances; to opt-out of the sale or sharing of their personal information; to correct inaccurate personal information; to limit the use and dis...
Monitoring
Smartsheet has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you may have the following rights under the CCPA/CPRA: the right to know about the personal information we collect, use, disclose, and sell or share; the right to delete personal information we have collected from you; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of your personal information; the right to limit the use and disclosure of sensitive personal information; and the right to non-discrimination for exercising your privacy rights.— Excerpt from Smartsheet's Smartsheet Privacy Policy
(1) REGULATORY LANDSCAPE: This provision is governed by the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). Enforcement authorities include the California Attorney General and the California Privacy Protection Agency. Smartsheet's explicit enumeration of these rights indicates awareness of its obligations, but compliance depends on the operational adequacy of its response processes, timelines, and verification procedures. (2) GOVERNANCE EXPOSURE: Medium. The enumeration of rights is standard for a CCPA-covered business, but the operational implementation, including response timelines, identity verification, and honoring of opt-out requests, is where compliance gaps most commonly arise. Organizations deploying Smartsheet should confirm that employee data submitted into the platform is addressed in Smartsheet's service provider designation to avoid inadvertent CCPA controller liability. (3) JURISDICTION FLAGS: Applies specifically to California residents. Other US states with comprehensive privacy laws (Virginia CDPA, Colorado CPA, Connecticut CTDPA, Texas TDPSA) have parallel but not identical rights frameworks; users in those states should review whether Smartsheet extends equivalent rights to them. (4) CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers using Smartsheet as a CCPA service provider should have a written service provider agreement in place restricting Smartsheet's use of personal data for purposes other than providing the contracted service. Without this, Smartsheet's sharing of data with advertising partners could potentially be treated as a sale, creating compliance exposure for the enterprise customer. (5) COMPLIANCE CONSIDERATIONS: California-resident users should exercise opt-out rights for data sharing proactively. Enterprise legal teams should audit whether Smartsheet's service provider status is formally documented and whether employee personal data flowing through Smartsheet is adequately addressed in data mapping exercises.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California's CCPA and CPRA provide among the strongest consumer data rights in the US, and Smartsheet's explicit acknowledgment of these rights means California residents have enforceable mechanisms to limit data sharing and request data deletion.
California residents can exercise rights including deletion, access, correction, and opt-out from data sharing for advertising purposes by submitting a request through Smartsheet's privacy request form, which Smartsheet is legally required to honor within specific timeframes under California law.
ConductAtlas has identified this type of provision across 11 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Smartsheet.