California users have specific legal rights to see, delete, correct, and opt out of the sale of their data, including the right to limit how sensitive financial data like SSNs is used.
This analysis describes what TurboTax's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California's CCPA and CPRA provide some of the strongest consumer data rights in the US, and TurboTax users in California can meaningfully restrict how their sensitive tax data is used beyond the core filing service.
Interpretive note: The specific operational mechanisms for each CPRA right are not fully visible in the truncated document; the adequacy of Intuit's implementation of each right requires direct verification through the privacy portal.
California TurboTax users can formally request deletion of their financial data, opt out of data sharing for advertising, and limit how Intuit uses their Social Security number and other sensitive information, which are rights not available to users in most other states.
How other platforms handle this
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
California law gives residents the right to know what personal information we collect, use, share or sell; to delete personal information under certain circumstances; to opt-out of the sale or sharing of their personal information; to correct inaccurate personal information; to limit the use and dis...
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you. You have the right to request deletion of your personal information, subject to certain exceptions. You have the right to opt out of the sale or sharing of your perso...
Monitoring
TurboTax has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have the right to know what personal information we collect about you, the right to delete your personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal information, and the right to limit the use and disclosure of sensitive personal information.— Excerpt from TurboTax's TurboTax Privacy Statement
REGULATORY LANDSCAPE: This provision directly implements the California Consumer Privacy Act as amended by the California Privacy Rights Act, enforced by the California Privacy Protection Agency and the California Attorney General. Sensitive personal information rights under CPRA specifically cover Social Security numbers and financial account data, categories central to TurboTax's service. The right to limit use of sensitive personal information is a CPRA addition not present in the original CCPA. GOVERNANCE EXPOSURE: Medium. Intuit must maintain operational mechanisms for each enumerated right including know, delete, correct, opt-out, and limit, with mandatory response timelines. Failure to honor requests within statutory timeframes creates regulatory exposure. JURISDICTION FLAGS: These rights apply specifically to California residents. Users in Colorado, Connecticut, Virginia, Texas, and other states with comprehensive privacy laws have analogous but not identical rights; the policy's California-specific disclosure may not fully address those users' rights. EU and UK users have overlapping but separately framed rights under GDPR. CONTRACT AND VENDOR IMPLICATIONS: Data deletion requests must cascade to downstream service providers and advertising partners who received the requesting user's data. Contracts with these parties should include deletion obligation provisions that can be operationally triggered within CCPA response windows. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that all five CPRA rights are supported by functioning technical infrastructure, that the two-business-day acknowledgment and forty-five-day response windows are being met, and that the sensitive personal information opt-out mechanism is prominently surfaced to California users.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California's CCPA and CPRA provide some of the strongest consumer data rights in the US, and TurboTax users in California can meaningfully restrict how their sensitive tax data is used beyond the core filing service.
California TurboTax users can formally request deletion of their financial data, opt out of data sharing for advertising, and limit how Intuit uses their Social Security number and other sensitive information, which are rights not available to users in most other states.
ConductAtlas has identified this type of provision across 10 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TurboTax.