Subject to statutory conditions and exceptions, consumers may:
-
request access to their personal data,
-
correct inaccuracies,
-
request deletion, and
-
obtain a portable copy of certain data they previously provided.
-
They may also opt-out of targeted advertising, personal-data sales, and profiling used for decisions producing legal or similarly significant effects.
Controllers generally must respond to authenticated requests within 45 days. A reasonably necessary extension of up to another 45 days is permitted with timely notice. Consumers must also have a process for appealing a refusal, and appeal decisions are due within 60 days.
Covered controllers must provide a reasonably accessible, clear privacy notice explaining the categories of personal data processed, the purposes of processing, how consumers may exercise their rights, categories of personal data shared with third-parties, and categories of third-parties receiving the data. Where applicable, controllers must provide opt-out mechanisms for targeted advertising and personal-data sales, limit data collection to what is adequate, relevant, and reasonably necessary, maintain reasonable security practices, and obtain consent before processing sensitive data. Controllers must also meet applicable processor-contract and data protection assessment requirements. The precise duties depend on the processing activity and statutory exceptions.
For operational guidance and structured compliance documentation tools, visit the CLIClaw Privacy Compliance Library.
These FAQs provide general information and operational commentary. They are not legal advice. Applicability and compliance obligations depend on an organization’s activities, data practices, exemptions, and circumstances. It is intended as a starting point for understanding the issues discussed and should not be relied on as a substitute for advice from qualified legal counsel.
These materials were obtained directly from the Federal Government public website and are posted here for your review and reference only. No Claim to Original U.S. Government Works. This may not be the most recent version. The U.S. Government may have more current information. We make no guarantees or warranties about the accuracy or completeness of this information, or the information linked to. Please check the linked sources directly.