---
title: "Supporting privacy rights"
slug: "supporting-privacy-rights"
abstract: "Overview of how Sitecore supports an individual's rights according to privacy legislation such as the EU General Data Protection Regulation (GDPR) and the California Consumer Protection Act (CCPA)."
---
# Supporting privacy rights

> [!warning]
> This Privacy Guide provides technical guidance on how your developers can choose to configure your Sitecore product implementation to support you with data privacy compliance. This guide does not provide exhaustive guidance, and should not be construed or used as legal advice about the content, interpretation, or application of any law or regulation. You, the customer, will always be in the best position to assess your own risks, and must seek your own legal counsel to understand the applicability of any law or regulation to your business, including how you process personal information. Your resulting implementation is based entirely on your own configuration choices.

Privacy legislation such as the [EU General Data Protection Regulation (GDPR)](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN) and [California Consumer Protection Act (CCPA)](https://leginfo.legislature.ca.gov/faces/billTextClient.xhtml?bill_id=201720180AB375) afford various rights to individuals including:

- [The right to erasure](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/right-to-erasure.html "Right to erasure")
- [The right of access](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/right-of-access-by-the-individual.html "Right of access by the individual")
- [The right to object or opt-out of selling of personal information](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/right-to-object-or-opt-out-of-selling-of-personal-information.html "Right to object or opt-out of selling of personal information")
- [The right to data portability](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/right-to-data-portability.html "Right to data portability")
- [The right to rectification](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/right-to-rectification.html "Right to rectification")
- [The right to be informed](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/right-to-be-informed.html "Right to be informed")
- [The right to restrict processing](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/right-to-restrict-processing.html "Right to restrict processing")
- [The right not to be subject to discrimination](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/right-not-to-be-subject-to-discrimination.html "Right not to be subject to discrimination")
- [The right to opt out of automated decision making and profiling](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/profiling-and-automated-decision-making.html "Profiling and automated decision-making")

The following section describes each data right as it relates to the contact, user, and customer entities, and lists the features, APIs, and configuration options available to you: [Entities that represent individuals in your Sitecore installation](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/entities-that-represent-individuals-in-your-sitecore-implementation.html "Entities that represent individuals in your Sitecore implementation").

See also:

- [Types of processing](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/types-of-processing.html "Types of processing")
- [Privacy functionality by feature](https://doc.sitecore.com/xp/en/developers/102/platform-administration-and-architecture/privacy-functionality-by-feature.html "Privacy functionality by feature")