Your Data Rights
Your rights depend on where you live. Here is what you can do, by jurisdiction.
European Union / EEA
The world's strongest privacy law. Right to access, delete, correct, and port your data. 30-day response deadline.
California
The strongest US privacy law. Know, delete, correct, opt out of sale. Plus the California DROP portal for data brokers.
United Kingdom
Equivalent rights to the EU GDPR. Same 30-day deadline. Supervised by the Information Commissioner's Office (ICO).
Other US States
Colorado, Connecticut, Virginia, Texas, and 10+ more states have enacted privacy laws. Find yours.
Rights at a glance
| Right | GDPR (EU) | CCPA (CA) | UK GDPR | No law |
|---|---|---|---|---|
| Know what data they hold | Yes | Yes | Yes | No |
| Download your data | Yes | Yes | Yes | No |
| Request deletion | Yes | Yes | Yes | No |
| Correct inaccurate data | Yes | Yes | Yes | No |
| Opt out of data sale | Yes | Yes | Yes | No |
| Company response deadline | 30 days | 45 days | 30 days | None |
| Regulator to complain to | National DPA | CPPA | ICO | None |
No law applies? You still have options. See our general request template — many companies will honor polite requests even without legal obligation. And for data brokers in particular, see California's DROP portal if you have a California connection.