Start with the outcome you want
CalPrivacy summarizes rights to know, delete, correct, opt out of sale or sharing, limit certain sensitive information uses, and receive equal treatment. These rights have conditions and exceptions. First identify the request that fits your concern rather than sending a vague demand for “privacy.”
Find the business’s request instructions
Use the privacy policy and the company’s published privacy contact. Record the page address, the request type, and the date. Requests about an account you use and requests to a data broker may follow different paths.
Keep verification sensible
A business may need to verify identity for some requests. Use its official channel. Keep a record if it asks for details that appear unrelated to your request. Do not send identification or account credentials through an initial inquiry to our firm.
Track the response
CalPrivacy’s consumer guide explains that businesses should respond within 45 days and may notify you that they need more time. Timing depends on the type of request; do not treat this as the deadline for every opt out. Keep confirmations, any extension notice, and the final explanation.
If something goes wrong
Save a denial or missing response in your timeline. You can read the official complaint instructions linked from CalPrivacy’s request guide. A complaint and an attorney consultation serve different purposes; neither automatically establishes that you have a lawsuit.
Go to the source
Official resources for the facts discussed here. Checked October 5, 2026.