Skip to content


While the CCPA confers a right to access, the right predates the CCPA and can be found within other laws within the United States. For example, the Health Insurance Portability and Accountability Act (HIPAA), which was adopted in 1996, allows consumers to request their medical records.[1] Similarly the Family and Educational Rights and Privacy Act (FERPA) allows students to access their educational records.[2]

Outside of the United States, the European GDPR (and the directive that predated the GDPR) allows data subjects to request both the categories and copies of the specific information that controllers maintain about them.[3]

[1] See 45 CFR 164.501.

[2] See 34 C.F.R. 99.7.

[3] GDPR, Art. 15.