The Policy establishes a process for California residents to request disclosure of the categories of personal information shared with third parties for direct marketing purposes and the identities of those third parties, limited to one request per calendar year submitted in writing.
This analysis describes what UnitedHealthcare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision addresses California's Shine the Light statute obligations but does not address California Consumer Privacy Act rights such as the right to know, right to delete, or right to opt out of sale or sharing of personal information for cross-context behavioral advertising. The scope of California privacy rights described in this Policy may not fully reflect the company's obligations under current California law.
California residents may submit one written request per calendar year to receive a list of personal information categories disclosed to third parties for direct marketing and the names and addresses of those third parties. The request must be submitted by mail or email as specified in the Contact Us section, with a subject line of 'California Privacy Rights-Direct Marketing.'
Cross-platform context
See how other platforms handle California Shine the Light Direct Marketing Disclosure and similar clauses.
Compare across platforms →"California law permits our customers who are California residents to request certain information regarding the disclosure of certain personal information to third parties for their direct marketing purposes. If we have disclosed any personal information to third parties for direct marketing purposes, we will provide a list of the categories of personal information, along with the names and addresses of these third parties to you at your request. To make such a request, write us at the postal or email address found in the Contact Us section of this Policy. This request may be made no more than once per calendar year.Excerpt from UnitedHealthcare's Privacy Policy
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
This provision addresses California's Shine the Light statute obligations but does not address California Consumer Privacy Act rights such as the right to know, right to delete, or right to opt out of sale or sharing of personal information for cross-context behavioral advertising. The scope of California privacy rights described in this Policy may not fully reflect the company's obligations …
California residents may submit one written request per calendar year to receive a list of personal information categories disclosed to third parties for direct marketing and the names and addresses of those third parties. The request must be submitted by mail or email as specified in the Contact Us section, with a subject line of 'California Privacy Rights-Direct Marketing.'
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by UnitedHealthcare.