State Law Approach

California Residents

California metrics

Californians doing work for AT&T

California business customers

Colorado Privacy Act (CPA)

Effective Jul-01-2023

The Colorado Privacy Act applies to Colorado consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
• Ask to correct inaccurate information.
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Colorado Privacy Rights Act?

The CPA lets Colorado residents view or delete information collected about them by businesses. It lets them limit the sale of their personal information and the use of their sensitive personal information. We need your explicit permission to use your sensitive personal information for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Connecticut Data Privacy Act?

The CTDPA lets Connecticut residents view or delete information collected about them by businesses. It lets them limit the sale of their personal information and the use of their sensitive personal information. We need your explicit permission to use your sensitive personal information for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Delaware Personal Data Privacy Act?

Like other states, this law provides Delaware residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads. Unique to Delaware, explicit permission is required to use sensitive data for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Iowa Consumer Data Protection Act (ICDPA)

Effective Jan-01-2025

The Iowa Consumer Data Protection Act applies to Iowa consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
  
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Iowa Consumer Data Protection Act?

The ICDPA lets Iowa residents view or delete information collected about them by businesses. It lets them limit the sale of their personal information and the use of their sensitive personal information.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Kentucky Consumer Data Protection Act (KYCDPA)

Effective January 1, 2026

The Kentucky Consumer Data Protection Act applies to Kentucky consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Ask to correct inaccurate information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Kentucky Consumer Data Protection Act?

Like other states, this law provides Kentucky residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads. In Kentucky, similar to other states, explicit permission is required to use sensitive data for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Maine Broadband Privacy Law

Effective Jul-01-2020

Privacy of Online Customer Information

If you live in Maine, your internet or wireless provider must follow state privacy laws. The laws restrict how your provider may use or share information about your internet usage, or information that identifies you personally, unless you opt in.

Your choice does not affect your basic service. But if you live in Maine and you’d like AT&T to help you get ads based on your interests, you must opt-in for our Personalized Plus program. You won’t get more ads online, just ads that may be more useful to you.

Millions of people take advantage of this program across the country. You can check it out for yourself, and you can change your mind at any time. Just log in with your AT&T user ID and password and click on Personalized Plus.

Personalized Plus

Here are some more details about the Maine internet law and our commitments to you:

• The Personalized Plus opt-in includes the use and sharing of internet usage. This includes web-browsing, app usage, location and device identifiers.
  
• We don’t penalize you or refuse service to you if you don’t want to participate.
• If you decide that you don’t want to share your info after you’ve already signed up for Personalized Plus, you can opt-out in the same place at any time.
• Consistent with the law, if you don’t opt in, we still may use and share your internet info to protect you from fraud, market our own services, comply with legal demands, and provide the basic internet service.

We keep your information secure, and we appreciate your business, no matter how you ask us to handle your data.

Please note that we don’t offer Personalized Plus to AT&T Prepaid customers at this time.

What has changed as a result of the Maine Act to Protect the Privacy of Online Customer Information?

The law restricts how we may use or share your internet usage information and identity.

Maryland Online Data Privacy Act (MDODPA)

Effective October 1, 2025

The Maryland Online Data Privacy Act applies to Montana consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Ask to correct inaccurate information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed because of the Maryland Online Data Privacy Act?

Like other states, this law provides Maryland residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads. Unique to Maryland, sensitive data can only be collected, used and shared when it is strictly necessary to provide or maintain a requested product or service.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Minnesota Consumer Data Privacy (MNCDPA)

Effective July 31, 2025

The Minnesota Consumer Data Privacy Act applies to Minnesota consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Ask to correct inaccurate information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Minnesota Consumer Data Privacy Act?

Like other states, this law provides Minnesota residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads. In Minnesota, similar to other states, explicit permission is required to use sensitive data for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Montana Consumer Data Privacy (MTCDPA)

Effective Oct-01-2024

The Montana Consumer Data Privacy Act applies to Montana consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Ask to correct inaccurate information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.
  

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Montana Consumer Data Privacy Act?

Like other states, this law provides Montana residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads. Unique to Montana, explicit permission is required to use sensitive data for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Nebraska Data Privacy Act (NDPA)

Effective January 1, 2025

The Nebraska Data Privacy Act applies to Nebraska consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Ask to correct inaccurate information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Nebraska Consumer Data Privacy Act?

Like other states, this law provides Nebraska residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads. Unique to Nebraska, its law applies to any company, regardless of size, that does business and controls or processes personal data in the state.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Nevada Data Privacy Law

Effective Oct-19-2019

The Nevada Data Privacy Law applies to Nevada consumers. As a resident, you have the right to:

• Limit the sale of your personal information and use of your sensitive personal information in certain circumstances. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

New Hampshire (SB 255)

Effective January 1, 2025

SB 255 applies to New Hampshire consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Ask to correct inaccurate information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of New Hampshire’s SB255?

Like other states, this law provides New Hampshire residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

New Jersey (SB 332)

Effective January 15, 2025

New Jersey’s SB 332 applies to New Jersey consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Ask to correct inaccurate information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of New Jersey’s SB 332?

Like other states, this law provides New Jersey residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads. In New Jersey, similar to some other states, explicit permission is required to use sensitive data for certain purposes. AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Oregon Consumer Privacy Act (OCPA)

Effective Jul-01-2024

The Oregon Data Privacy Law applies to Oregon consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
  
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
  
• Ask to correct inaccurate information.
  
• Limit the sale of your personal information and use of your sensitive personal information in certain circumstances. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

Oregon Registered Entities

Pursuant to Oregon law, AT&T is a personal data controller and has registered additional business names and entities that operate in the state. View our Oregon registered entities.

What has changed as a result of the Oregon Data Privacy Law?

Like other states, this law provides Oregon residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads. Unique to Oregon, explicit permission is required to use sensitive data for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Tennessee Information Privacy Act (TIPA)

Effective Jul-01-2025

The Tennessee Information Privacy Act applies to Tennessee consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
  
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
  
• Ask to correct inaccurate information.
  
• Limit the sale of your personal information and use of your sensitive personal information in certain circumstances. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Tennessee Data Privacy Law?

Like other states, this law provides Tennessee residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted ads. Unique to Tennessee, explicit permission is required to use sensitive data for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Texas Data Privacy and Security Act (TDPSA)

Effective Jul-01-2024

The Texas Data Privacy and Security Act applies to Texas consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
  
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
  
• Ask to correct inaccurate information.
  
• Limit the sale of your personal information and use of your sensitive personal information in certain circumstances. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Texas Data Privacy Law?

Like other states, this law provides Texas residents the right to view, delete, limit the sale of their personal data, and opt out of profiling and targeted advertising. Unique to Texas, explicit permission is required to use sensitive data for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Utah Consumer Privacy Act (UCPA)

Effective Dec-31-2023

The Utah Consumer Privacy Act applies to Utah consumers. As a resident, you have the right to:

• Ask to view or delete information we have that’s linked to you.
• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Limit the sale of your personal information and use of your sensitive personal information. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Utah Consumer Privacy Act?

The UCPA lets Utah residents view or delete information collected about them by businesses. It lets them limit the sale of their personal information and the use of their sensitive personal information, including the right to opt out of targeted advertising.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Virginia Consumer Data Protection Act (VCDPA)

Effective Jan-01-2023

The Virginia Consumer Data Protection Act applies to Virginia consumers. As a resident, you have the right to:

• Ask to access or delete information we have that’s linked to you, subject to certain exceptions.
• Ask to correct inaccurate information.

• Ask to port (export) your information. In this case, we provide you with the same Access Report as when you ask to view your information.
• Limit the sale of your personal information and use of your sensitive personal information in certain circumstances. If you want to see your current permissions, you can view them at att.com/PrivacyChoices.

Your Choices

To underscore our dedication to respecting your privacy and to give all consumers the same choices, we offer these options even where it's not mandated by law. Visit Your Choices and Controls.

What has changed as a result of the Virginia Data Protection Act?

The VCDPA lets Virginia residents view or delete information collected about them by businesses. It lets them limit the sale of their personal information and the use of their sensitive personal information. AT&T has always strived to offer transparency, choice and control to customers. We need your explicit permission to use your sensitive personal information for certain purposes.

AT&T has always strived to offer transparency, choice and control to customers.

If you have additional questions, visit our FAQs page.

Washington

Consumer Health Data Privacy Notice - State of Washington