How‑To Delete

Data Privacy Laws Guide 2025: GDPR, CCPA, and Your Rights

Complete guide to data privacy laws worldwide. Learn your rights under GDPR, CCPA, and other privacy regulations to protect your personal information.

Key Privacy Laws

  • GDPR: European Union's comprehensive data protection regulation
  • CCPA: California's Consumer Privacy Act protecting US residents
  • PIPEDA: Canada's Personal Information Protection and Electronic Documents Act
  • LGPD: Brazil's General Data Protection Law

GDPR (General Data Protection Regulation)

Who's Protected

Your GDPR Rights

🔍 Right to Access (Article 15)
  • What it means: You can request to see all personal data a company has about you
  • What you get: Copy of your data, purposes for processing, who it's shared with
  • How to use: Submit a Subject Access Request (SAR) to any company
  • Timeline: Companies must respond within 30 days
  • Cost: First request is free, additional requests may have fees
🗑️ Right to Erasure/"Right to be Forgotten" (Article 17)
  • What it means: You can demand deletion of your personal data
  • When it applies: Data no longer necessary, consent withdrawn, unlawful processing
  • How to use: Delete social media accounts, request data deletion from companies
  • Limitations: Freedom of expression, legal compliance, public interest may override
  • Example: Requesting Google remove outdated search results about you
✏️ Right to Rectification (Article 16)
  • What it means: You can correct inaccurate personal data
  • Scope: Fix errors in your profile, contact information, preferences
  • How to use: Contact companies directly to correct mistakes
  • Timeline: Must be corrected without undue delay
📦 Right to Data Portability (Article 20)
  • What it means: You can get your data in a machine-readable format
  • Use case: Transfer data from one service to another (e.g., social media export)
  • Format: Structured, commonly used format (like JSON or CSV)
  • Example: Export your Facebook data before deletion
🚫 Right to Object (Article 21)
  • What it means: You can object to certain types of data processing
  • Marketing: Absolute right to opt out of marketing communications
  • Profiling: Object to automated decision-making and profiling
  • Legitimate interests: Object unless company has compelling legitimate grounds
⏸️ Right to Restriction (Article 18)
  • What it means: You can limit how companies process your data
  • When to use: While disputing accuracy, objecting to processing, or during legal proceedings
  • Effect: Data can only be stored, not actively processed

How to Exercise GDPR Rights

  1. Contact the Company: Find their privacy or data protection contact
  2. Specify Your Right: Clearly state which GDPR right you're exercising
  3. Provide Identification: Companies may request ID verification
  4. Set Deadline: Remind them of the 30-day response requirement
  5. Escalate if Needed: Contact your national data protection authority if ignored

CCPA (California Consumer Privacy Act)

Who's Protected

Your CCPA Rights

📋 Right to Know
  • Information: What personal information is collected about you
  • Sources: Where your information comes from
  • Purpose: Why it's collected and how it's used
  • Sharing: Who your information is shared with
  • Sales: Whether your information is sold and to whom
🗑️ Right to Delete
  • Scope: Request deletion of personal information businesses have collected
  • Method: Businesses must provide clear "Delete My Data" options
  • Limitations: Some exceptions for transactions, security, free speech
  • Verification: Businesses may require identity verification
🚫 Right to Opt-Out of Sale
  • What it covers: Prevents sale of your personal information to third parties
  • How to use: Look for "Do Not Sell My Personal Information" links
  • Scope: Applies to monetary sales and valuable consideration
  • Age protection: Automatic opt-out for users under 16
⚖️ Right to Non-Discrimination
  • Protection: Companies cannot discriminate for exercising privacy rights
  • Prohibited: Denying services, charging different prices, providing different service quality
  • Allowed: Financial incentives for data sharing (if reasonable and disclosed)

How to Exercise CCPA Rights

  1. Find Privacy Links: Look for "Do Not Sell" or privacy policy links on websites
  2. Submit Requests: Use company-provided forms or contact methods
  3. Verify Identity: Provide requested identification documents
  4. Wait for Response: Companies have 45 days to respond (extendable to 90)
  5. File Complaints: Contact California Attorney General if rights are violated

Other Major Privacy Laws

PIPEDA (Canada)

LGPD (Brazil)

UK Data Protection Act 2018

Practical Application: Deleting Your Data

Using Privacy Laws for Account Deletion

🔴 Social Media Platforms
  • GDPR Request: "I request deletion of all my personal data under Article 17 GDPR"
  • CCPA Request: "I request deletion of my personal information under CCPA Section 1798.105"
  • Guides: Facebook, Instagram, TikTok
🟡 Tech Companies
🟢 Data Brokers
  • Spokeo, Whitepages, etc.: Most now have CCPA/GDPR removal forms
  • People Search Sites: Reference privacy laws in removal requests
  • Credit Reporting: Special procedures for credit report opt-outs

Template Privacy Law Requests

GDPR Data Deletion Request

Subject: GDPR Article 17 - Request for Data Deletion

Dear Data Protection Officer,

I am writing to request the deletion of all personal data you hold about me under Article 17 of the General Data Protection Regulation (GDPR).

My details:
Name: [Your Name]
Email: [Your Email]
Account ID: [If applicable]

I request that you delete all personal data relating to me from your systems within 30 days as required by GDPR. Please confirm completion of this request in writing.

If you believe you have legitimate grounds to refuse this request, please explain your reasoning in detail.

Best regards,
[Your Name]

CCPA Data Deletion Request

Subject: CCPA Data Deletion Request

Dear Privacy Team,

As a California resident, I am requesting deletion of my personal information under the California Consumer Privacy Act (CCPA), Section 1798.105.

My details:
Name: [Your Name]
Email: [Your Email]
Phone: [If applicable]
Account: [If applicable]

Please delete all personal information you have collected about me. I understand you have 45 days to respond to this request.

I also exercise my right to non-discrimination under CCPA Section 1798.125.

Thank you,
[Your Name]

Enforcement and Remedies

Filing Complaints

Major Data Protection Authorities

Upcoming Privacy Laws

US Federal Privacy Law

State-Level Laws

Global Expansion

Best Practices for Consumers

Proactive Privacy Protection

Documentation

Privacy Implementation Guides