I asked 100 companies for my data. Some deleted it instead.
Summary
A reporter requested personal data from over 100 companies under California's Consumer Privacy Act (CCPA), which allows people to access their data. Many companies responded incorrectly or deleted data despite requests for access only, showing problems with how companies handle privacy law requests.Key Facts
- The California Consumer Privacy Act (CCPA) gives consumers rights to access, delete, or opt out of the sale of their personal data.
- The reporter asked McDonald’s and more than 100 other companies to send all the data they had about them.
- McDonald’s sent a 515-page report detailing app usage and predictions about the reporter’s behavior.
- Many companies took a long time to respond and required multiple identity verifications.
- Some companies, like Crunchbase, deleted accounts or data by mistake when only data access was requested.
- Other companies refused to process requests as outlined in their own privacy policies.
- Consumer advocates say these problems show the weaknesses in relying on companies to follow privacy laws properly.
- The reporter used generative AI to help draft emails and organize the data requests.
This is a fact-based summary from The Actual News. Click below to read the complete story directly from the original source.