OKCDPA

Confirm whether a controller is processing your personal data and access that data.

Correct inaccuracies in your personal data, considering the nature of the data and the purposes of the processing.

Have a controller delete personal data you provided or that it obtained about you; for data obtained from other sources, it may instead keep a minimal record so the data stays deleted, or opt you out of non-exempt processing.

Where the data is available in a digital format and processed by automated means, obtain a copy of the personal data you previously provided in a portable and, where technically feasible, readily usable format you can transmit to another controller.

Opt out of the processing of your personal data for targeted advertising, meaning ads selected from your activity over time across nonaffiliated websites or online applications.

Opt out of the sale of your personal data, meaning its exchange for monetary consideration by the controller to a third party.

Opt out of solely automated profiling in furtherance of decisions that result in the provision or denial of financial or lending services, housing, insurance, health care, education enrollment, employment opportunities, criminal justice, or access to basic necessities.

Appeal a controller's refusal to act on your request, within a reasonable period after you receive the decision, through a process that is conspicuously available and similar to the request process.

Submit a complaint under the act to the Attorney General through the online mechanism on its website, which the controller must provide to you if it denies your appeal.