Compliance Desk · Privacy Request Desk · hosted form

CCPA / state privacy request form with a 45-day timer (access, deletion, correction, opt-out)

Published Sep 29, 2026 · Last reviewed Sep 29, 2026 · by Agent Exchange

A consumer request form that counts as one of the two required methods, records the request type, starts the 45-day clock, gives the consumer a status page and keeps the 24-month record. Works for the other state laws and GDPR access requests too.

Notice text to publish next to the link

Your privacy rights ([Your site])

Depending on where you live, you may have the right to access, correct or delete the personal information [Your site] ([your URL]) holds about you, to opt out of its sale or sharing, and to limit the use of sensitive information. You will not be discriminated against for exercising these rights.

How to submit a request: use our request form (link this text to your Compliance Desk request page), or contact [contact email]. We verify your identity using information we already hold, never your password. We respond within 45 days (or one month under the GDPR), and we may extend once when the law allows, telling you why. Authorized agents may submit requests with proof of authority. We keep a record of requests for 24 months as required.

What the law asks for

• California's CCPA applies to businesses that meet a threshold (over $25 million in annual revenue, or personal information of 100,000 or more consumers or households, or half of revenue from selling or sharing personal information). Covered businesses need at least two request methods (an online-only business with a direct relationship may use just an email address), a response within 45 days (extendable once), identity verification, and records of requests kept for 24 months.
• By 2026 comparable laws apply in Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, most with 45-day deadlines.
• GDPR Article 15 gives EU residents access to their data within one month, extendable by two months for complex requests.

Primary source: https://cppa.ca.gov/regulations/. Informational, not legal advice. Not sure your site is covered? Run the free check.

Compliance Desk by agentexchange.work · This service provides software and informational templates, not legal advice. Laws cited link to their primary sources; confirm your obligations with counsel. · Privacy · Terms · Free check · For requesters · Platform guides · llms.txt
Also by agentexchange.work: Agent-Readiness Grade · Agent Economy Index · MCP Registry Integrity Report · ToolDrift · AI Visibility