The policy grants state-specific privacy rights including access, deletion, correction, portability, and opt-out of sale, sharing, targeted advertising, and profiling, with availability depending on the user's state of residence.
This analysis describes what Zillow's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision operationalizes Zillow's compliance with CCPA/CPRA and analogous state privacy statutes by establishing the rights framework, request process, and response obligations applicable to covered residents.
Interpretive note: The specific rights available, response timelines, and verification requirements vary by state, and the policy's general description may not capture all operative requirements for each jurisdiction.
Expands consumer rights disclosure beyond CCPA to cover multiple state privacy laws (CPRA, VCCPA, etc.), adding data portability and anti-profiling rights while using more inclusive 'depending on where you live' language.
View full change record →Under these terms, residents of California, Virginia, Colorado, Connecticut, and other covered states can submit requests to access, delete, correct, or export their personal information, and to opt out of sale, sharing, targeted advertising, and certain profiling, using Zillow's designated request portal or toll-free number.
How other platforms handle this
Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to access your personal information, the right to correct inaccurate data, the right to delete your data, the right to portability, the right to object to processing, and ...
For individuals in the United States, please also refer to our Notice For Individuals Residing In Certain US States below and the Consumer Health Data Policy.
If you are a California resident, you may have the right to: Know what personal information we collect, use, disclose, sell, or share. Correct inaccurate personal information. Delete your personal information. Opt out of the sale or sharing of your personal information. Limit the use and disclosure ...
Monitoring
Zillow has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"Depending on where you live, you may have certain rights regarding your personal information. These may include the right to know what personal information we have collected about you, the right to delete your personal information, the right to correct inaccurate personal information, the right to data portability, and the right to opt out of the sale or sharing of your personal information or its use for targeted advertising or profiling.— Excerpt from Zillow's Zillow Privacy Notice
1. REGULATORY LANDSCAPE: This provision directly engages CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), and potentially other state privacy frameworks as they become effective. The California Privacy Protection Agency and relevant state attorneys general are the primary enforcement authorities. Response timelines, verification requirements, and the scope of covered rights vary across these frameworks. 2. GOVERNANCE EXPOSURE: Medium. The obligation to respond to consumer rights requests within statutory timeframes, verify requestor identity without creating undue barriers, and honor opt-out signals creates ongoing operational compliance obligations. Non-compliance with rights request procedures is a documented area of regulatory scrutiny under CCPA. 3. JURISDICTION FLAGS: California creates the highest exposure given CPRA's enforcement agency and its additional rights, including the right to limit use of sensitive personal information and the right to opt out of automated decision-making. Virginia, Colorado, and Connecticut have appeal rights for denied requests, requiring a secondary review process. Additional states with enacted privacy laws should be monitored as effective dates approach. 4. CONTRACT AND VENDOR IMPLICATIONS: Data deletion and access requests may require downstream notification to service providers holding copies of personal information. Vendor agreements should include contractual obligations to support deletion and access fulfillment within required timelines. 5. COMPLIANCE CONSIDERATIONS: Compliance teams should verify that rights request intake, verification, and fulfillment workflows are operational and meet statutory timelines for each covered state. Appeal procedures for Virginia, Colorado, and Connecticut residents should be documented and tested. The policy's description of rights should be reviewed for accuracy against current statutory requirements in each jurisdiction.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision operationalizes Zillow's compliance with CCPA/CPRA and analogous state privacy statutes by establishing the rights framework, request process, and response obligations applicable to covered residents.
Under these terms, residents of California, Virginia, Colorado, Connecticut, and other covered states can submit requests to access, delete, correct, or export their personal information, and to opt out of sale, sharing, targeted advertising, and certain profiling, using Zillow's designated request portal or toll-free number.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Zillow.