CCPA authorized agent requests

What an authorized agent is

Under the CCPA, a consumer can authorize another person or a business to make privacy requests for them. Many requests you receive this way come from privacy services acting for large numbers of consumers at once. The request is still the consumer's request, and the usual deadlines apply.

What you can ask for

For a request to know, delete or correct personal information made by an agent, the CCPA regulations let a business require the agent to provide proof that the consumer gave signed permission. The business may also require the consumer to verify their own identity directly, or to confirm directly that they gave the agent permission. Requests to opt out of the sale or sharing of personal information are treated differently, and you should not put the same verification hurdles in front of them; check the regulations for what applies.

Whatever you ask for, ask consistently and only for what you need. If an agent doesn't provide proof of the consumer's permission, the regulations allow you to deny the request.

The deadlines

• Requests to know, delete or correct: confirm receipt within 10 business days, and respond within 45 calendar days. You can extend once by up to 45 more days if you tell the consumer within the first 45.
• Requests to opt out of sale or sharing: act on them within 15 business days.

Responding well

1. Send your reply to the address the request asks for, which is often the agent's, and quote any case reference.
2. Search for the consumer under every identifier the request gives.
3. Record the request, any verification step, what you did and when you replied.
4. Expect volume: agents send requests in bulk, so a manual process needs a reliable way to spot the ones it missed.

Official sources: California Privacy Protection Agency: CCPA regulations (see the sections on authorized agents, verification and responding to requests) · California Attorney General: CCPA.

This guide is general information, not legal advice. Privacy laws and regulations change; check the official sources linked above or ask your lawyer about your situation. Last reviewed October 2026.