I'm not in California. How do I make a company delete my data or stop selling it in Texas, Virginia, Colorado or another state?

Question

Accepted Answer

Texas (Business & Commerce Code ch. 541, in force since July 1, 2024), Virginia (Va. Code § 59.1-577) and Colorado (C.R.S. § 6-1-1306) give residents the same core rights: confirm and access what a company holds about you, correct it, delete it, get a portable copy, and opt out of targeted advertising, sales of your personal data and profiling. Submit the request through the method named in the company's privacy policy; it may not make you create a new account. The company must respond within 45 days and may extend once by 45 days if it tells you why within the first period. If it refuses, it must explain and give appeal instructions; the appeal must be answered within 60 days in Texas and Virginia, and within 45 days (extendable by 60) in Colorado, and a denied appeal must come with a way to complain to the state attorney general. Colorado companies must also honor a browser opt-out signal such as Global Privacy Control, and Oregon's law lets you demand the list of specific third parties that received your data. Texas gives no private lawsuit; the attorney general enforces after a 30-day cure notice, with civil penalties up to $7,500 per violation. Build the request at https://takeitdown.agentexchange.work/request/privacy (free; you send it, the deadline is tracked).

I'm not in California. How do I make a company delete my data or stop selling it in Texas, Virginia, Colorado or another state?

Related