Rights to access, delete and correct personal information
Under the CCPA, the notice says you may have the right to request access to your personal information in a portable format, or other information about American Express's data processing practices; deletion of the personal information it has collected from you; and correction of the personal information it has collected about you.
Details
Who
California residents
What it does
may request access, deletion and correction
What it covers
Personal information held by American Express
Supporting quotations
Under the CCPA, you may have the right to request:
Access to your personal information in a portable format, or other information about our data processing practices;
Deletion of the personal information we have collected from you;
Correction of the personal information we have collected about you; and
Qualifications & exceptions
These are rights you "may have"; the notice says they are subject to limitations (see the limitations card) and do not extend to individuals whose information is protected under the Gramm-Leach-Bliley Act.
Not stated here
The notice does not say how long American Express takes to respond to a request or what format a portable copy takes.
Cross-references
qualified by (model-proposed): Who has the California privacy rights — The rights apply to California residents but not to individuals whose personal information is protected under the Gramm-Leach-Bliley Act.
qualified by (model-proposed): Limits on these rights — The rights to access, delete and correct are subject to limitations, such as retaining personal information to comply with legal obligations.
Account & Service Control · Company commitment
No discrimination for exercising these rights
American Express says it will not discriminate against you if you choose to exercise any of these rights. It says you have the right to keep receiving similar goods or services from it, at similar prices or rates and at the same level or quality as before.
Details
Who
American Express
What it does
will not discriminate against you for exercising these rights
What it covers
Goods or services, prices or rates, and level or quality
Supporting quotations
We will not discriminate against you if you choose to exercise any of these rights, and you have the right to continue to receive similar goods or services from us, at similar prices or rates, and at the same level or quality as you received them previously.
Qualifications & exceptions
The limitations on these rights, described in the next card, are stated in the sentence that follows.
How to ask to delete, access or correct information
To request deletion, access or correction of your personal information, or to ask questions or raise concerns, the notice tells you to visit the American Express Privacy Center, contact American Express at 1 (800) 528-4800, or call the number on the back of your card.
Details
Who
California residents
What it does
visit the Privacy Center, call 1 (800) 528-4800, or call the number on the back of the card
What it covers
Requests to delete, access or correct personal information
Supporting quotations
The Right to Delete, Access, or Correct Personal Information
If you would like to make a request to delete, access, or correct your personal information or have any questions or concerns, please visit our Privacy Center, contact us at 1 (800) 528-4800, or call the number on the back of your card.
Not stated here
The notice does not describe the Privacy Center request process or how long a response takes.
Account & Service Control · Restriction or exception
Identity checks and authorized agents
The notice says American Express may need to validate certain information about you to verify your identity before it can fulfill your request. If you make an access or deletion request on behalf of another person, it may require you to provide proof that you have been designated as their authorized agent.
Details
Who
American Express
What it does
may validate information to verify identity; may require proof of authorized agent status
Condition
Before fulfilling a request; for access or deletion requests made for another person
Supporting quotations
We may need to validate certain information about you to verify your identity before we can fulfill your request.
If you are making a request for access or deletion rights on behalf of another person, we may require you to provide proof that you have been designated as their authorized agent.
Qualifications & exceptions
The wording is "may need" and "may require".
Not stated here
The notice does not say what information is validated or what counts as proof of authorized agent status, and it names access and deletion but does not mention correction requests made through an agent.