California users have specific legal rights to see, delete, correct, and opt out of the sale of their data, including the right to limit how sensitive financial data like SSNs is used.
This analysis describes what TurboTax's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
California's CCPA and CPRA provide some of the strongest consumer data rights in the US, and TurboTax users in California can meaningfully restrict how their sensitive tax data is used beyond the core filing service.
Interpretive note: The specific operational mechanisms for each CPRA right are not fully visible in the truncated document; the adequacy of Intuit's implementation of each right requires direct verification through the privacy portal.
The updated privacy statement no longer describes a specific opt-out procedure for advertising cookies that was previously available. The prior version stated users could 'opt out of having your personal information used or disclosed for these purposes by sliding the toggle to No and clicking Save My Choices', but this mechanism and accompanying language are no longer present in the updated disclosure. The updated terms also no longer explicitly state that IP addresses and device identifiers may be shared with advertising partners, removing prior transparency about what data types are disclosed. You should review TurboTax's main Privacy Policy to determine if opt-out mechanisms exist elsewhere or what the current data-sharing practices are.
View change record →The updated terms now explicitly state that TurboTax and its advertising partners use cookies and tracking technologies to deliver targeted advertising on and off TurboTax sites. The policy discloses that IP addresses and device identifiers may be shared with advertising partners to show you more relevant ads, and states these practices may be considered 'targeted advertising' or 'sharing' of personal information under applicable law. You can decline third-party advertising cookies by going to 'Customize Settings,' though essential website cookies required for site functionality cannot be refused.
View change record →California TurboTax users can formally request deletion of their financial data, opt out of data sharing for advertising, and limit how Intuit uses their Social Security number and other sensitive information, which are rights not available to users in most other states.
How other platforms handle this
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...
If you are a California resident, you have the right to: Know what personal information is being collected about you; Know whether your personal information is sold or disclosed and to whom; Say no to the sale of personal information; Access your personal information; Request deletion of your person...
If you are a California resident, you have the right to know what personal information we collect, use, and disclose about you; the right to request deletion of your personal information; the right to opt out of the sale or sharing of your personal information; the right to correct inaccurate person...
Monitoring
TurboTax has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a California resident, you have the right to know what personal information we collect about you, the right to delete your personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal information, and the right to limit the use and disclosure of sensitive personal information.— Excerpt from TurboTax's TurboTax Privacy Statement
REGULATORY LANDSCAPE: This provision directly implements the California Consumer Privacy Act as amended by the California Privacy Rights Act, enforced by the California Privacy Protection Agency and the California Attorney General. Sensitive personal information rights under CPRA specifically cover Social Security numbers and financial account data, categories central to TurboTax's service. The right to limit use of sensitive personal information is a CPRA addition not present in the original CCPA. GOVERNANCE EXPOSURE: Medium. Intuit must maintain operational mechanisms for each enumerated right including know, delete, correct, opt-out, and limit, with mandatory response timelines. Failure to honor requests within statutory timeframes creates regulatory exposure. JURISDICTION FLAGS: These rights apply specifically to California residents. Users in Colorado, Connecticut, Virginia, Texas, and other states with comprehensive privacy laws have analogous but not identical rights; the policy's California-specific disclosure may not fully address those users' rights. EU and UK users have overlapping but separately framed rights under GDPR. CONTRACT AND VENDOR IMPLICATIONS: Data deletion requests must cascade to downstream service providers and advertising partners who received the requesting user's data. Contracts with these parties should include deletion obligation provisions that can be operationally triggered within CCPA response windows. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that all five CPRA rights are supported by functioning technical infrastructure, that the two-business-day acknowledgment and forty-five-day response windows are being met, and that the sensitive personal information opt-out mechanism is prominently surfaced to California users.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
California's CCPA and CPRA provide some of the strongest consumer data rights in the US, and TurboTax users in California can meaningfully restrict how their sensitive tax data is used beyond the core filing service.
California TurboTax users can formally request deletion of their financial data, opt out of data sharing for advertising, and limit how Intuit uses their Social Security number and other sensitive information, which are rights not available to users in most other states.
ConductAtlas has identified this type of provision across 14 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TurboTax.