Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The policy grants state-specific privacy rights including access, deletion, correction, portability, and opt-out of sale, sharing, targeted advertising, and profiling, with availability depending on the user's state of residence.
This analysis describes what Zillow's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes Zillow's compliance with CCPA/CPRA and analogous state privacy statutes by establishing the rights framework, request process, and response obligations applicable to covered residents.
Interpretive note: The specific rights available, response timelines, and verification requirements vary by state, and the policy's general description may not capture all operative requirements for each jurisdiction.
Expands consumer rights disclosure beyond CCPA to cover multiple state privacy laws (CPRA, VCCPA, etc.), adding data portability and anti-profiling rights while using more inclusive 'depending on where you live' language.
View full change record →Under these terms, residents of California, Virginia, Colorado, Connecticut, and other covered states can submit requests to access, delete, correct, or export their personal information, and to opt out of sale, sharing, targeted advertising, and certain profiling, using Zillow's designated request portal or toll-free number.
How other platforms handle this
You may make a verifiable consumer request related to your personal information twice per 12-month period.
When you exercise any of your applicable legal rights to access, amend, or delete your personal information, we may request additional information from you for the purpose of confirming your identity.
We share your information with service providers for legitimate business operations, such as data storage and hosting.
Monitoring
Zillow has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Depending on where you live, you may have certain rights regarding your personal information. These may include the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the right to data portability, and the right to opt out of the sale or sharing of your personal information or its use for targeted advertising or profiling.Excerpt from Zillow's Privacy Notice
1. REGULATORY LANDSCAPE: This provision directly engages CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), and potentially other state privacy frameworks as they become effective. The California Privacy Protection Agency and relevant state attorneys general are the primary enforcement authorities. Response timelines, verification requirements, and the scope of covered rights vary across these frameworks. 2. GOVERNANCE EXPOSURE: Medium. The obligation to respond to consumer rights requests within statutory timeframes, verify requestor identity without creating undue barriers, and honor opt-out signals creates ongoing operational compliance obligations. Non-compliance with rights request procedures is a documented area of regulatory scrutiny under CCPA. 3. JURISDICTION FLAGS: California creates the highest exposure given CPRA's enforcement agency and its additional rights, including the right to limit use of sensitive personal information and the right to opt out of automated decision-making. Virginia, Colorado, and Connecticut have appeal rights for denied requests, requiring a secondary review process. Additional states with enacted privacy laws should be monitored as effective dates approach. 4. CONTRACT AND VENDOR IMPLICATIONS: Data deletion and access requests may require downstream notification to service providers holding copies of personal information. Vendor agreements should include contractual obligations to support deletion and access fulfillment within required timelines. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that rights request intake, verification, and fulfillment workflows are operational and meet statutory timelines for each covered state. Appeal procedures for Virginia, Colorado, and Connecticut residents should be documented and tested. The policy's description of rights should be reviewed for accuracy against current statutory requirements in each jurisdiction.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision operationalizes Zillow's compliance with CCPA/CPRA and analogous state privacy statutes by establishing the rights framework, request process, and response obligations applicable to covered residents.
Under these terms, residents of California, Virginia, Colorado, Connecticut, and other covered states can submit requests to access, delete, correct, or export their personal information, and to opt out of sale, sharing, targeted advertising, and certain profiling, using Zillow's designated request portal or toll-free number.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zillow.