Right to Limit Use and Disclosure

A CPRA consumer right enabling individuals to limit businesses' use and disclosure of their sensitive personal information to purposes necessary to perform services or provide goods reasonably expected by the consumer. Under CPRA Section 1798.121, this right applies to sensitive personal information including Social Security numbers, driver's licenses, financial account details, precise geolocation, racial/ethnic origin, religious beliefs, genetic data, private communications, and biometric information for unique identification. Businesses using or disclosing sensitive personal information for purposes beyond necessity must provide consumers the right to limit such use. Organizations must provide clear 'Limit the Use of My Sensitive Personal Information' links and honor limitation requests within 15 business days. However, businesses can request consumer consent to use/disclose sensitive information beyond limited purposes after providing limitation notice. This right recognizes the heightened sensitivity of certain data categories and gives consumers control over how this information is leveraged for secondary purposes like analytics or advertising.