California residents have legal rights under CCPA to access, delete, correct, and opt out of the sale of their personal data, and can limit how Walgreens uses their most sensitive information.
This analysis describes what Walgreens's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These are legally enforceable rights that give California customers meaningful control over their personal and health data held by Walgreens, including the right to stop their data from being shared with advertisers.
If you live in California, you have specific legal rights to see what data Walgreens holds about you, request deletion, correct errors, and stop your data from being sold or shared with advertising partners, including for sensitive categories like health information.
How other platforms handle this
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
If you are a California resident, you have the right to know what personal information we collect, use, disclose, and sell about you. You have the right to request deletion of your personal information, subject to certain exceptions. You have the right to opt out of the sale or sharing of your perso...
If you are a California resident, you have the right to know what personal information we collect about you, the right to delete personal information we have collected from you, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal informa...
Monitoring
Walgreens has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have the right to know what personal information we have collected about you, to delete personal information we have collected about you, to correct inaccurate personal information we have collected about you, to opt-out of the sale or sharing of your personal information, and to limit the use and disclosure of your sensitive personal information.— Excerpt from Walgreens's Walgreens Privacy Policy
REGULATORY LANDSCAPE: This provision reflects obligations under the California Consumer Privacy Act as amended by the California Privacy Rights Act. The California Privacy Protection Agency and California Attorney General share enforcement authority. The provision's reference to limiting use and disclosure of sensitive personal information reflects CPRA's specific sensitive personal information framework, which includes health data, precise geolocation, and financial information as regulated categories. GOVERNANCE EXPOSURE: Medium. The provision represents a legally mandated disclosure and rights framework rather than a novel corporate assertion. Compliance exposure arises from operational implementation: whether request verification processes are appropriately calibrated, whether opt-out mechanisms function as described, and whether the policy's description of available rights matches actual system capabilities. JURISDICTION FLAGS: Applies specifically to California residents under CCPA and CPRA. Other states with enacted consumer privacy laws including Colorado, Virginia, Connecticut, Texas, and others have analogous rights frameworks that may require similar operational infrastructure. State-specific rights vary in scope and are not all addressed in this provision. CONTRACT AND VENDOR IMPLICATIONS: Service providers receiving personal information from Walgreens must be contractually restricted from using data beyond the specified service purpose to avoid triggering sale classification under CCPA. Vendor contracts should be reviewed for CCPA-compliant data processing terms. Advertising partners in particular require careful contractual scoping. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the data subject request intake, verification, and response process meets CCPA's timing and accuracy requirements; audit opt-out mechanisms for the sale and sharing of personal information to confirm they function as disclosed; assess sensitive personal information use limitation mechanisms; and evaluate whether the rights framework described is extended to residents of other states with similar statutory rights.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These are legally enforceable rights that give California customers meaningful control over their personal and health data held by Walgreens, including the right to stop their data from being shared with advertisers.
If you live in California, you have specific legal rights to see what data Walgreens holds about you, request deletion, correct errors, and stop your data from being sold or shared with advertising partners, including for sensitive categories like health information.
ConductAtlas has identified this type of provision across 15 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Walgreens.