Prepare an authorized-agent privacy request in California

For a California resident using a covered business’s CCPA process, an authorized-agent request needs more than informal help sorting mail. Identify the exact privacy right being exercised, then follow the permission and verification rules for that request. The consumer remains the person whose choice the agent is carrying out.

By Junk Mail Magic. Updated October 2, 2026.

Separate the request from proof of authority

Write down the request type: sale or sharing opt-out, or a request to know, correct or delete. Do not use a general instruction to stop mail as a substitute for selecting the intended privacy action.
For an agent-submitted sale or sharing opt-out, California’s rule calls for written permission signed by the consumer. The business may deny an agent request lacking that proof. The written-permission requirement does not apply to an opt-out preference signal.
For a request to know, correct or delete, the business may require proof of signed permission and direct consumer identity verification or confirmation of permission. It cannot require the consumer to resubmit the request individually.
Use the business’s verified privacy route. Agree who will receive follow-up and keep any identity checks within that process. Do not give the agent general account access merely to submit a privacy request.

Do not expand the permission

The regulations do not let a business require a power of attorney just to use an authorized agent. A qualifying power of attorney has a separate treatment under the rule; do not improvise one from a worksheet.

An agent must protect the consumer’s information and may use it only to fulfill the requests, verification or fraud prevention. Keep the instructions limited to the selected business and action. A completed privacy request does not establish a postal preference with every advertiser.

Private preparation worksheet

Example for your own use. Replace the bracketed details and review what you share.

Consumer and business: [names] Selected privacy right: [specific request] Agent named by consumer: [name] Permission evidence required: [verified instructions] Consumer verification or confirmation route: [business channel] Follow-up recipient: [consumer / agent, as agreed] Request and response dates: [dates] Scope still unresolved: [question] This worksheet is not an authorization form or power of attorney.

Record the answer to the authorized task

Keep the submitted request, authority evidence and response in a private folder. If the business asks for a different action, pause and check that the consumer wants it. Confirmation should identify the privacy request handled, rather than merely stating that a message was received.

Official source

CalPrivacy: current CCPA regulations, sections 7026(j) and 7063

Check a California opt-out form that asks for ID Submit a California sale or sharing opt-out Agree on what a helper may do with advertising mail Track a California privacy request's response dates Privacy and marketing lists All practical mail guides

Choose the route that matches the mailing

Use the official route described in this guide for this kind of mail. For a separate ordinary advertisement, Junk Mail Magic can help prepare a sender-specific removal request.

Compare removal routes