Grade A- — Mostly protective (score 85/100)
OneTrust provides robust privacy rights and security measures, though it does share data for marketing purposes.
Strong privacy protections with clear rights and security certifications.
We do not sell personal information for monetary consideration. However, we do share or disclose personal information that could be considered a ‘sale’ under the California Consumer Privacy Act
While they do not sell data for money, they share it in ways that are legally defined as a 'sale' under California law.
We may share personal information where required by law or in response to valid requests by public authorities.
The company will disclose your personal information to government or law enforcement agencies if they receive a valid request.
Those rights include, for example, the right to access the personal data we hold about you; the right to rectify inaccurate data; the right to erasure (right to be forgotten) if you want all your personal data deleted from our systems
You have the explicit right to request that your personal data be deleted from their systems.
OneTrust, LLC and OneTrust Technology Limited have been audited and received a SOC 2 report addressing the security, confidentiality, and availability of OneTrust’s services.
The company maintains independent security certifications, indicating a commitment to protecting user data.
Last reviewed 2026-07-27 under rubric v3.5.