Webull
· Webull Privacy Policy
This provision establishes a regulatory disclosure mechanism that requires Webull to respond to consumer requests for data inventory and usage information within the timeframes and procedures mandated by CCPA statute, creating an operational obligation for Webull to maintain systems for processing and responding to such requests.
CCPA gives California residents enforceable rights over their personal data that go beyond what Nintendo extends to users in other states; if you are a California resident, you have specific mechanisms to control or delete your data.
Steam
· Steam Privacy Policy
This provision establishes the regulatory baseline for Valve's data handling practices across major privacy regimes. By stating compliance with CCPA, GDPR, and UK GDPR, the clause anchors the privacy policy to specific statutory obligations, which define what data practices are permissible and what consumer rights apply.
Affirm
· Affirm Privacy Policy
This provision establishes Affirm's legal obligations to honor CCPA-enumerated consumer rights and establishes the operational framework under which California residents may exercise data subject access, deletion, and opt-out requests without service discrimination.
GitHub
· GitHub Privacy Statement
The policy confirms California residents have enforceable rights under CCPA and CPRA including the right to opt out of data sharing with third parties, which is practically significant given the policy's disclosure that data may be shared with advertising and analytics partners.
These rights give California users meaningful control over their sensitive financial data, including the ability to stop Betterment from sharing it with advertising and analytics partners.
Acorns
· Acorns Privacy Policy
This provision establishes operative consumer rights under CCPA and CPRA for California residents, creating enforceable obligations for Acorns to respond to rights requests and to provide a functional opt-out-of-sale-and-sharing mechanism.
The policy discloses specific CCPA rights available to California residents and identifies a direct contact mechanism for exercising them, which enables residents to act on rights that the California Privacy Rights Act has extended to include the right to correct personal information and to limit sensitive personal information use.
ADP
· ADP Privacy Statement
CCPA provides enforceable rights backed by California law, including the right to opt out of data sharing that could affect advertising and marketing uses of your information, and the right to non-discrimination for exercising those rights.
SoFi
· SoFi Privacy Notice
The policy provides California residents with a mechanism to opt out of the sharing of their personal information for cross-context behavioral advertising and to exercise other CCPA/CPRA data subject rights, which are legally mandated entitlements under California law.
These rights are legally enforceable under California law and give California residents meaningful control over their data, including the ability to request deletion and stop data sharing for advertising purposes.
Midjourney
· Midjourney Data Retention & Privacy FAQ
The policy discloses that Midjourney does not sell personal information under CCPA but does not address whether data shared with business partners for advertising or other purposes constitutes CPRA-regulated sharing, which may carry its own opt-out requirement distinct from the sale opt-out.
23andMe
· 23andMe Privacy Statement
The provision establishes 23andMe's acknowledgment of California statutory privacy obligations and delineates the specific consumer rights the company recognizes under state law. This framing establishes the legal basis for consumer requests and the company's commitment to comply with applicable privacy statutes.
This provision establishes Coinbase's obligations under California privacy law to provide California residents with specific data access, deletion, and control mechanisms. The clause operationalizes statutory rights by explicitly recognizing them within the privacy policy framework.
This provision implements California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) statutory requirements by establishing the procedural framework and enumerated rights that California residents may exercise. The specification of submission methods establishes operational requirements for DoorDash to receive and process consumer requests.
Chegg
· Chegg Terms of Use
California residents have enforceable statutory rights to access, delete, and control the sale of their personal data, and Chegg is obligated to respond to these requests, though the process and response timelines are not detailed in the terms excerpt.
These are enforceable statutory rights under California law, meaning ClickUp must comply with valid requests and cannot retaliate by degrading service for users who exercise them.
These rights are enforceable under CCPA as amended by CPRA and give California residents meaningful control over a significant portion of the personal data Robinhood collects, though GLBA-covered financial data is excluded from these rights as stated elsewhere in the policy.
California's comprehensive privacy laws give residents more control over their personal data than federal law currently provides, including the right to stop Delta from sharing data with promotional partners.
Chegg
· Chegg Privacy Policy
This provision implements statutory requirements under California privacy law (CCPA/CPRA) by establishing a procedural mechanism through which eligible users can exercise data subject rights and ensures the entity acknowledges its obligation to respond to such requests within regulatory timeframes.
This provision discloses CPRA rights applicable to California residents, including the right to limit use of sensitive personal information such as precise geolocation and browsing data, and the right to opt out of sharing for cross-context behavioral advertising, which are operationally significant given the breadth of data Verizon collects.
AT&T
· AT&T Terms of Service
This clause establishes procedural mechanisms through which California residents can exercise statutory rights under California privacy law. The provision conditions these rights on exceptions defined within AT&T's terms, which affects the scope of disclosable information and deletable data categories.
This provision operationalizes California Consumer Privacy Act (CCPA) requirements within Disney+'s service terms, establishing specific mechanisms by which California residents can request data access, deletion, correction, and opt-out actions. The non-discrimination clause ensures that exercise of these statutory rights does not result in differential service pricing or availability.
Acorns
· Acorns Privacy Policy
These rights are legally enforceable under California law and give California residents meaningful control over how a financial app with highly sensitive data uses and shares their information.
This provision operationalizes CCPA/CPRA statutory rights for California residents and establishes the non-discrimination obligation. The scope and effectiveness of these rights in practice depends on the adequacy of the request submission mechanisms, verification procedures, and response timelines implemented by Walgreens.
These rights give California residents meaningful control over their personal data, including the ability to stop Verizon from sharing their data with third parties for advertising purposes.
Ford
· Ford Privacy Policy
This provision operationalizes California Consumer Privacy Act (CCPA) requirements by specifying the categories of consumer rights Ford recognizes and establishing the procedural mechanisms—portal submission or telephone contact—through which California residents may exercise those rights.
These are legally enforceable rights under California law, not just policy commitments, and include the right to opt out of data sharing for behavioral advertising, which is relevant given Cloudflare's use of third-party advertising cookies.
Chase
· Chase Privacy Notice
California's CCPA and CPRA give residents meaningful control over their personal data held by financial institutions, including rights not available to consumers in most other U.S. states.
This provision operationalizes Paramount+'s compliance obligations under California privacy law by articulating the specific individual rights mechanisms available to California residents. The enumeration establishes the framework through which California users may exercise data subject rights.