Your opt-out rights beyond California

Most US states have now passed or are passing privacy laws that give you rights similar to California's—even if the details vary. If you live outside California, you likely have the ability to request that companies delete your data, tell you what they collect, or stop selling it to third parties. Here's what you need to know.

Your rights depend on where you live

Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states have enacted comprehensive privacy laws. These laws typically grant you the right to access, delete, and opt out of the sale or use of your data for targeted advertising. The exact scope, company size thresholds, and timelines differ by state. If you've moved or split time between states, you may qualify for protections in more than one.

To find out which laws apply to you and what rights they grant, the IAPP maintains a tracker showing which states have enacted laws and their current status. This is the most reliable resource for understanding your specific state's requirements.

How to exercise your rights

Start by checking your state's privacy law details through the IAPP tracker. When you've identified applicable laws, you can:

• Contact companies directly requesting access, deletion, or opt-out of data sales and targeted advertising
• Look for privacy request forms on company websites (many larger businesses now provide these)
• Keep records of your requests and responses
• Check your state's official resources or attorney general's office for guidance on enforcement or complaints

California's data-broker registry is unique—for now

California currently operates the only public data-broker registry with a deletion mechanism. If you live in California, you can use this tool to identify and request removal from brokers. Residents of other states do not yet have a comparable centralized registry, though this may change as state laws continue to evolve.