Consumer Rights Overview and Response Timelines
These laws grant GDPR-like rights (access, correction, deletion, portability, opt-outs, etc.). Response times: Colorado, Connecticut, Utah, Virginia allow 45 days (+45 more if needed); California uses 45 days generally but only 15 days for opt-out requests. Right to appeal exists in Colorado, Connecticut, Virginia only.
How this supports CIPP/US study
Use this lesson to compare state-law scope, rights, exceptions and enforcement before choosing an answer. Continue with the CIPP/US exam questions.
Consumer rights mirror the GDPR and include: access, correction, deletion, data portability, opt out of sales, opt out of targeting/cross-context behavioral advertising, right against automated decision-making, right concerning sensitive personal information, and nondiscrimination.
| State | Standard response time | Special rule | Right to appeal? |
|---|---|---|---|
| Colorado | 45 days (+45 if reasonably necessary) | - | Yes |
| Connecticut | 45 days (+45 if reasonably necessary) | - | Yes |
| Virginia | 45 days (+45 if reasonably necessary) | - | Yes |
| Utah | 45 days (+45 if reasonably necessary) | - | No |
| California | 45 days for certain requests | Opt-out requests: 15 days | No |
Two California traps: opt-out requests get only 15 days (not 45), and California lacks an explicit right to appeal (so does Utah). The right to appeal belongs to Colorado, Connecticut, and Virginia.
Key terms - quick answers
What is “Right to appeal”?
Sources and study method
This independent lesson uses active recall, spaced retrieval and scenario practice. Read the full study method.