Can I ask my service provider not to collect, use, or disclose my personal information?

Yes. You or your substitute decision-maker have the right to refuse or limit the collection, use, or disclosure of your personal information. You may consent to share some of your personal information with others, but not all of it. For example, you may be okay to share information about your allergies, but not information related to your mental health. You may also consent to have your personal information shared with one third party, but not with another. For example, with your doctor, but not with your teacher.

Service providers generally need your consent to collect, use, or disclose your personal information, unless the law allows them to do this without your consent. For example, your service provider can collect, use, or disclose your personal information without your consent if it is necessary to review, reduce, or remove a risk of harm to you or another person or group.

If you previously told your service provider that they could collect, use, or share your personal information, you can change your mind at any time and let your service provider know about your change of decision. Once you let them know, they must stop collecting, using, or sharing your personal information, except in situations where the law allows or requires them to do so.