● Covered by 1 source · 1 reportMedium impact1 negative
Experiment Reveals Inconsistent Corporate Responses to CCPA Data Access Requests
Key points
- Requested personal data from over 100 companies under CCPA.
- Some companies deleted data despite requests for access.
- Process was time-consuming and involved identity verification issues.
- Consumer advocates criticize current corporate handling of data requests.
CCPA Data Access Experiment
An individual conducted an experiment by filing over 100 data access requests with various companies under the California Consumer Privacy Act (CCPA). The goal was to understand what personal data these companies collect. The CCPA, effective since 2020, grants consumers the right to opt out of data selling, request data deletion, and obtain a copy of their collected information.
Inconsistent Corporate Responses
The experiment revealed significant inconsistencies in how companies handled these requests. Some companies, despite being asked for data access, responded by deleting the information. Others refused to process requests through methods listed in their own privacy policies, creating obstacles for the requester.
Challenges in the Process
The process of filing these requests was described as time-consuming, involving difficulties in finding correct filing methods and repeated identity verification. For example, a request to McDonald's resulted in a 515-page report detailing app interactions and predictive analysis.
Advocate Concerns
Consumer advocates expressed concern over these findings. Ben Winters, director of AI and privacy at the Consumer Federation of America, stated that such responses are not an acceptable status quo and indicate weaknesses in policy frameworks that rely on companies to act responsibly. This suggests a need for stronger enforcement or clearer guidelines for corporate compliance with data privacy laws.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
An individual's experiment requesting personal data from over 100 companies under the California Consumer Privacy Act (CCPA) revealed significant inconsistencies and difficulties, with some companies deleting data instead of providing it. This highlights challenges in enforcing consumer data rights and the varying compliance practices among companies regarding privacy regulations.