---
title: >-
  Protected customer data access required to use the Customer Account API -
  Shopify developer changelog
description: >-
  Shopify’s developer changelog documents all changes to Shopify’s platform.
  Find the latest news and learn about new platform opportunities.
source_url:
  html: >-
    https://shopify.dev/changelog/protected-customer-data-access-required-to-use-the-customer-account-api
  md: >-
    https://shopify.dev/changelog/protected-customer-data-access-required-to-use-the-customer-account-api.md
metadata:
  effectiveApiVersion: 2024-01
  affectedApi:
    - displayName: Customer Account API
      handle: customer-account-graphql
  primaryTag:
    displayName: API
    handle: api
  secondaryTag:
    displayName: Update
    handle: update
  indicatesActionRequired: true
  createdAt: '2024-08-06T11:34:02-04:00'
  postedAt: '2024-08-26T17:00:00-04:00'
  updatedAt: '2024-08-23T14:16:45-04:00'
  effectiveAt: '2024-08-26T17:00:00-04:00'
---

August 26, 2024

Tags:

* Action Required
* Customer Account API
* 2024-01

# Protected customer data access required to use the Customer Account API

We are requiring apps to meet at least Level 1 Protected Customer Data Requirements in order to access the Customer Account GraphQL API. This change is applicable to all API versions. We recognize that this may be a breaking change for public apps that use the Customer Account API and is necessary to ensure the protection of customer data.

This change will not impact Hydrogen and Headless storefronts or Custom Apps since they already have access to Level 1 and Level 2 Protected Customer data.

Partners that are part of the Customer Account UI Extensibility developer preview and are calling the Customer Account API from their extensions will need to [request access](https://shopify.dev/docs/apps/launch/protected-customer-data#request-access-to-protected-customer-data) to continue to access the API.

Learn more about Protected Customer Data on [shopify.dev](https://shopify.dev/docs/apps/store/data-protection/protected-customer-data).