Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Intuit states that users can download, update, and delete their data directly through the Intuit Account portal without requiring support contact.
This analysis describes what TurboTax's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision describes a self-service data rights mechanism that may operationally correspond to CCPA right-to-delete and right-to-access obligations and GDPR data subject rights. The document does not specify response timelines, exceptions to deletion, or the categories of data covered by these controls.
Interpretive note: The document does not specify exceptions to deletion, covered data categories, or fulfillment timelines; operative terms are contained in the full privacy statement not reproduced here.
The updated privacy statement no longer describes a specific opt-out procedure for advertising cookies that was previously available. The prior version stated users could 'opt out of having your personal information used or disclosed for these purposes by sliding the toggle to No and clicking Save My Choices', but this mechanism and accompanying language are no longer present in the updated disclosure. The updated terms also no longer explicitly state that IP addresses and device identifiers may be shared with advertising partners, removing prior transparency about what data types are disclosed. You should review TurboTax's main Privacy Policy to determine if opt-out mechanisms exist elsewhere or what the current data-sharing practices are.
View change record →The updated terms now explicitly state that TurboTax and its advertising partners use cookies and tracking technologies to deliver targeted advertising on and off TurboTax sites. The policy discloses that IP addresses and device identifiers may be shared with advertising partners to show you more relevant ads, and states these practices may be considered 'targeted advertising' or 'sharing' of personal information under applicable law. You can decline third-party advertising cookies by going to 'Customize Settings,' though essential website cookies required for site functionality cannot be refused.
View change record →Under this provision, users may access, correct, and request deletion of their Intuit Account data through the account portal. The document does not detail exceptions to deletion or timelines for fulfillment, which are typically addressed in the operative privacy statement.
Cross-platform context
See how other platforms handle Self-Service Data Access, Update, and Deletion Rights and similar clauses.
Compare across platforms →Monitoring
TurboTax has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"You also have the power to download, update, and delete your data right from your Intuit Account without having to call or email us.Excerpt from TurboTax's Privacy Statement
1) REGULATORY LANDSCAPE: Self-service data deletion and access rights engage CCPA/CPRA Section 1798.100 (right to know) and Section 1798.105 (right to delete) enforced by the California Privacy Protection Agency, and GDPR Articles 15 and 17 for EU/EEA users. The FTC Act may also apply if stated rights are not operationally fulfilled. The document does not specify applicable exceptions to deletion such as legal hold, regulatory retention, or fraud prevention carve-outs. 2) GOVERNANCE EXPOSURE: Medium. The assertion of self-service deletion rights without specifying scope, exceptions, or fulfillment timelines in this document creates a gap between the stated right and its operative terms. If the full privacy statement imposes conditions or exceptions that materially limit the deletion right as described here, that gap may warrant review under CCPA and GDPR disclosure standards. 3) JURISDICTION FLAGS: California residents have legally enforceable deletion rights under CCPA with defined response timelines (45 days, extendable to 90). EU/EEA users have GDPR-backed deletion rights with similar timelines and specified exceptions. The document's unqualified description of deletion rights may create user expectations that differ from the operative terms in the full privacy statement. 4) CONTRACT AND VENDOR IMPLICATIONS: Organizations processing employee or customer data through Intuit products should verify that self-service deletion exercised by individual users does not inadvertently delete data the organization is required to retain under applicable law or contractual obligations. 5) COMPLIANCE CONSIDERATIONS: Legal and compliance teams should verify that the self-service deletion mechanism in the Intuit Account portal fulfills CCPA and GDPR deletion right timelines and scope requirements, and that the operative privacy statement clearly discloses any exceptions to deletion. The data export function should be assessed for completeness relative to CCPA right-to-know category and specific piece requirements.
Full institutional analysis
Regulatory citations, enforcement risk, and due diligence action items.
Monitor: same-day alerts on the platforms you choose. Analyst: full institutional analysis.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision describes a self-service data rights mechanism that may operationally correspond to CCPA right-to-delete and right-to-access obligations and GDPR data subject rights. The document does not specify response timelines, exceptions to deletion, or the categories of data covered by these controls.
Under this provision, users may access, correct, and request deletion of their Intuit Account data through the account portal. The document does not detail exceptions to deletion or timelines for fulfillment, which are typically addressed in the operative privacy statement.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by TurboTax.