California residents have six specific privacy rights under CCPA/CPRA: the right to know, delete, correct, opt out of data sale or sharing, limit sensitive data use, and protection against discrimination for exercising these rights.
This analysis describes what Yelp's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These are legally enforceable rights under California law that give California residents meaningful control over their personal data held by Yelp, including the ability to stop their data from being shared with advertising partners.
California residents can exercise these six rights at any time by contacting Yelp through its privacy request process; the most practically impactful rights are the opt-out from data sharing for advertising and the right to limit use of sensitive personal information such as precise location and health data.
How other platforms handle this
We use your information for the following purposes: ... In accordance with applicable legal requirements, for advertising and marketing purposes, including to send you information about products or services that may be of interest to you...
If you are a California resident, you may have certain rights under the California Consumer Privacy Act (CCPA). These rights may include: the right to know about personal information collected, disclosed, or sold; the right to delete personal information collected from you; the right to opt-out of t...
California law gives residents the right to know what personal information we collect, use, share or sell; to delete personal information under certain circumstances; to opt-out of the sale or sharing of their personal information; to correct inaccurate personal information; to limit the use and dis...
Monitoring
Yelp has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a California resident, you have the right to: (1) know what personal information we have collected about you and how it is used and shared; (2) delete personal information we have collected about you (with some exceptions); (3) correct inaccurate personal information that we maintain about you; (4) opt out of the sale or sharing of your personal information; (5) limit the use and disclosure of sensitive personal information; and (6) not be discriminated against for exercising your privacy rights.— Excerpt from Yelp's Yelp Privacy Policy
REGULATORY LANDSCAPE: These rights are grounded in the California Consumer Privacy Act as amended by the California Privacy Rights Act, enforced by the California Privacy Protection Agency and the California Attorney General. The enumerated rights align with the statutory framework and are not unusual in scope relative to what CCPA/CPRA requires. The non-discrimination right (right 6) prohibits denial of service or degraded service quality in response to rights exercises. GOVERNANCE EXPOSURE: Medium. Compliance exposure here is primarily operational: Yelp must maintain functioning request submission and response processes that meet CCPA's 45-day response timeline (extendable by 45 days with notice), verify requestor identity without requiring excessive information, and honor opt-out signals including Global Privacy Control (GPC). Failure to operationalize these rights creates enforcement risk with the CPPA. JURISDICTION FLAGS: Applies specifically to California residents. Analogous rights exist under Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and other state comprehensive privacy laws, though the specific rights enumerated may differ slightly. Compliance teams should maintain a state-by-state rights matrix. CONTRACT AND VENDOR IMPLICATIONS: Third-party service providers and advertising partners receiving California residents' data must be bound by contracts prohibiting use of the data beyond specified purposes and must assist Yelp in honoring consumer requests. Data processing agreements should be reviewed for CCPA service provider provisions. COMPLIANCE CONSIDERATIONS: Compliance teams should audit the end-to-end request fulfillment process including identity verification procedures, response timelines, and downstream partner notification when opt-outs are exercised. The Global Privacy Control signal must be recognized as a valid opt-out under CPRA. Annual data practice assessments and cybersecurity audits may be required under CPRA for businesses meeting certain thresholds.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These are legally enforceable rights under California law that give California residents meaningful control over their personal data held by Yelp, including the ability to stop their data from being shared with advertising partners.
California residents can exercise these six rights at any time by contacting Yelp through its privacy request process; the most practically impactful rights are the opt-out from data sharing for advertising and the right to limit use of sensitive personal information such as precise location and health data.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Yelp.