The policy states that customers can request to access, delete, correct, or limit their personal information, and can opt out of data sale or sharing, by submitting a request through Walmart's privacy portal or by phone.
This analysis describes what Walmart's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are enforceable under CPRA and analogous state statutes, and the mechanism through which Walmart enables consumers to exercise them determines whether Walmart meets its statutory compliance obligations, including response time requirements and identity verification procedures.
Interpretive note: Verbatim text was not fully recoverable from the truncated HTML source; analysis is grounded in Walmart's published privacy notice structure and applicable statutory requirements.
Customers can submit requests to access, delete, or correct their personal information and opt out of data sale or sharing through Walmart's online privacy portal or by phone, but must provide sufficient information for Walmart to verify their identity before requests are processed.
How other platforms handle this
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
Depending on where you live, you may have certain rights with respect to your personal information. These rights may include: The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which we collected i...
Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the rig...
Monitoring
Walmart has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"You have the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of your personal information, and the right to limit the use of your sensitive personal information. To exercise these rights, you may submit a request through our privacy request portal at walmart.com/privacy or by calling our toll-free number.— Excerpt from Walmart's Walmart Privacy Notice
REGULATORY LANDSCAPE: CPRA requires businesses to respond to verifiable consumer requests within 45 days, with a possible 45-day extension, and prohibits discriminating against consumers who exercise their privacy rights. Analogous response timeline and non-discrimination requirements exist under state privacy statutes in Virginia, Colorado, Connecticut, and Texas. The California Privacy Protection Agency has issued detailed regulations governing the mechanics of consumer request fulfillment. GOVERNANCE EXPOSURE: Medium. The adequacy of Walmart's identity verification procedures for consumer rights requests is a documented compliance risk; overly burdensome verification requirements can constitute a de facto barrier to rights exercise, which has been flagged in regulatory guidance. The provision covers a large consumer population across multiple states, creating ongoing operational obligations. JURISDICTION FLAGS: California's CPRA creates the most detailed procedural requirements for consumer rights fulfillment. Virginia and Colorado require businesses to establish an appeal mechanism when consumer requests are denied. For minors, COPPA and CPRA impose heightened deletion rights that may require separate fulfillment workflows. CONTRACT AND VENDOR IMPLICATIONS: Walmart's service providers must be capable of responding to consumer deletion and correction requests that affect data held by those providers. Vendor contracts should include provisions requiring timely assistance with consumer rights request fulfillment and data deletion upon request. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the privacy request portal is functional and accessible on both desktop and mobile, that identity verification requirements are not disproportionately burdensome relative to the sensitivity of the data involved, and that internal workflows exist to fulfill requests within the statutory 45-day window across all data systems including in-store transaction records.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights are enforceable under CPRA and analogous state statutes, and the mechanism through which Walmart enables consumers to exercise them determines whether Walmart meets its statutory compliance obligations, including response time requirements and identity verification procedures.
Customers can submit requests to access, delete, or correct their personal information and opt out of data sale or sharing through Walmart's online privacy portal or by phone, but must provide sufficient information for Walmart to verify their identity before requests are processed.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Walmart.