Privacy Center: Access, Deletion and Opt-Out Rights

Compliance Framework

GSDSI operates under CCPA/CPRA, CAN-SPAM, TCPA, GDPR, and the evolving US state-privacy-act landscape (Virginia CDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Iowa ICDPA, Montana CDPA, Oregon OCPA, Texas TDPSA, Florida FDBR, and others). Consumer-report-adjacent products carry FCRA-ineligible labeling. Privacy-request handling meets the 45-day verification SLA required by California law.

Global Privacy Control

If a supported browser sends a Global Privacy Control signal, GSDSI treats it as an automatic opt-out of sale and sharing for that browser. No confirmation step, portal visit, or account is required. The DSR portal remains available for optional identity-linked suppression and for other request types (access, delete, correct, limit sensitive use).

FAQ

What privacy requests can I submit through the Privacy Center?

You can submit requests to access, know, delete, correct, opt out of sale or sharing, or limit the use of sensitive personal information. The available request types depend on your jurisdiction and the information GSDSI can verify.

Why does GSDSI verify my identity before completing a request?

Verification helps ensure that personal information is disclosed, deleted, corrected, or suppressed only for the right person. The request portal collects the information needed to match your request to relevant records and prevent unauthorized access.

How long does GSDSI take to respond?

GSDSI processes privacy rights requests within the time required by applicable law. Many requests are handled within 45 days, while sale or sharing opt-out requests are processed on the shorter timeline described on the Do Not Sell page where applicable.

Can I use Global Privacy Control instead of the form?

Yes. GSDSI honors recognized Global Privacy Control signals as an opt-out of sale or sharing where required by applicable law. The request portal remains available for access, deletion, correction, and other request types.