Chegg
· Chegg Terms of Use
California residents have enforceable statutory rights to access, delete, and control the sale of their personal data, and Chegg is obligated to respond to these requests, though the process and response timelines are not detailed in the terms excerpt.
Plaid
· Plaid End User Privacy Policy
This provision operationalizes Plaid's legal obligations under California privacy law by defining the request processes, verification procedures, and response timelines for consumer privacy rights exercises. It establishes the institutional procedures Plaid must follow to process and fulfill consumer requests under CCPA mandates.
Ford
· Ford Privacy Policy
This provision operationalizes California Consumer Privacy Act (CCPA) requirements by specifying the categories of consumer rights Ford recognizes and establishing the procedural mechanisms—portal submission or telephone contact—through which California residents may exercise those rights.
Chegg
· Chegg Privacy Policy
This provision implements statutory requirements under California privacy law (CCPA/CPRA) by establishing a procedural mechanism through which eligible users can exercise data subject rights and ensures the entity acknowledges its obligation to respond to such requests within regulatory timeframes.
This provision operationalizes Paramount+'s compliance obligations under California privacy law by articulating the specific individual rights mechanisms available to California residents. The enumeration establishes the framework through which California users may exercise data subject rights.
These are legally enforceable rights under California law, not just policy commitments, and include the right to opt out of data sharing for behavioral advertising, which is relevant given Cloudflare's use of third-party advertising cookies.
The clause operationalizes California Consumer Privacy Act (CCPA) statutory obligations by designating specific submission channels and confirming Starbucks' requirement to honor data subject requests within statutory timelines and to refrain from retaliatory pricing or service denial.
This provision implements California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) statutory requirements by establishing the procedural framework and enumerated rights that California residents may exercise. The specification of submission methods establishes operational requirements for DoorDash to receive and process consumer requests.
AT&T
· AT&T Terms of Service
This clause establishes procedural mechanisms through which California residents can exercise statutory rights under California privacy law. The provision conditions these rights on exceptions defined within AT&T's terms, which affects the scope of disclosable information and deletable data categories.
Acorns
· Acorns Privacy Policy
These rights are legally enforceable under California law and give California residents meaningful control over how a financial app with highly sensitive data uses and shares their information.
California's comprehensive privacy laws give residents more control over their personal data than federal law currently provides, including the right to stop Delta from sharing data with promotional partners.
This provision operationalizes California Consumer Privacy Act (CCPA) requirements within Disney+'s service terms, establishing specific mechanisms by which California residents can request data access, deletion, correction, and opt-out actions. The non-discrimination clause ensures that exercise of these statutory rights does not result in differential service pricing or availability.
These rights are enforceable under CCPA as amended by CPRA and give California residents meaningful control over a significant portion of the personal data Robinhood collects, though GLBA-covered financial data is excluded from these rights as stated elsewhere in the policy.
Consent-by-use provisions are common in privacy policies, but under CPRA and other state privacy frameworks, certain rights (such as opting out of sale or sharing and requesting deletion) cannot be waived by general consent to terms of service.
The provision operationalizes Sony's legal obligations under California privacy law by defining the consent mechanisms for minor data sales (affirmative opt-in for ages 13-16, parental consent for under 13) and establishing the procedural framework for consumer requests. This establishes Sony's operational requirements for processing privacy requests and maintaining audit trails demonstrating compliance with state-mandated consumer rights.
Okta
· Okta Privacy Policy
Even though Okta states it does not 'sell' data in the traditional sense, California law's definition of 'sharing' for advertising purposes is broad enough to capture certain analytics and advertising activities, and California residents have an enforceable right to stop this.
OpenAI
· OpenAI Privacy Policy
The clause operationalizes California's statutory privacy framework by specifying the mechanism for exercising CCPA rights and clarifying OpenAI's position on data sales practices. This establishes the procedural framework through which residents can assert their legal entitlements under state law.
Zoom
· Zoom Privacy Statement
This provision operationalizes California's statutory consumer privacy framework (CCPA/CPRA) within Zoom's service terms, establishing the procedural mechanisms through which California residents may exercise legally mandated data subject rights and establishing Zoom's obligation to honor such requests without penalizing the requester.
This clause acknowledges Robinhood's obligation to comply with California privacy statutes by recognizing resident rights to control personal information collection, use, disclosure, and deletion. The provision establishes the legal framework under which California residents may exercise data subject access and control mechanisms.
These rights give California consumers meaningful control over a wide range of data GM holds about them, including vehicle location, driving behavior, and biometric data — but these rights must be actively exercised by submitting a request.
Ford
· Ford Privacy Policy
This provision establishes the procedural rights available to California residents regarding their personal information held by Ford, including an opt-out mechanism for data sale and sharing and a non-retaliation commitment, as required under CCPA and CPRA.
Webull
· Webull Privacy Policy
The provision establishes Webull's acknowledgment of California-specific privacy obligations that operate as statutory requirements independent of the agreement. These rights are established by California law and the provision confirms the company's recognition of them.
Plaid
· Plaid Terms of Use
This provision establishes the specific statutory privacy rights available to California residents under CCPA/CPRA in the context of Plaid's financial data collection and use activities, including the designated mechanisms for exercising those rights.
This provision operationalizes Mixpanel's compliance obligations under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), establishing specific mechanisms through which eligible residents can exercise statutory data subject rights and establishing Mixpanel's corresponding obligation to process and respond to such requests.
Garmin
· Garmin Privacy Statement
The clause establishes procedural obligations for Garmin to respond to consumer data access, deletion, and privacy control requests from California residents. These rights are operational requirements under California privacy law that define the data subject access and control mechanisms available to this user population.
Square
· Square Privacy Notice
These rights are backed by California law and are enforceable against Square; exercising them can materially limit how your personal information is used for advertising and profiling purposes.
This provision operationalizes statutory rights under California's CCPA/CPRA by establishing the mechanism through which consumers can request access, deletion, correction, and opt-out actions regarding their personal information. It defines TurboTax's obligation to receive and process these consumer requests through a designated portal.
Brex
· Brex Privacy Policy
This clause establishes Brex's acknowledgment of California statutory privacy rights and describes the specific consumer control mechanisms available under state law. The provision operationalizes Brex's obligations to honor requests from California residents exercising these legally-mandated rights.
California residents have enforceable rights under state law that go beyond what Public's general policy offers to all users, including the right to limit use of sensitive personal information such as SSNs and financial data.
Target
· Target Privacy Policy
The clause establishes Target's operational obligation to honor California statutory privacy rights and creates defined mechanisms through which California residents can exercise control over their personal information holdings and usage practices.