I asked 100 companies for my data. Some deleted it instead.

A recent investigation tested the responses of 100 companies to privacy requests, revealing significant challenges for consumers attempting to access their personal data. Under California law, residents have the right to request access to the data that companies collect about them. However, the investigation found that many of these requests led to confusion and dead ends, with some companies opting to delete the data instead of providing it to the requester. This outcome raises concerns about the effectiveness of existing privacy regulations. The investigation highlighted that when individuals sought to access their personal data, they frequently received deletion notices rather than the requested information. This pattern indicates a troubling trend in how companies handle privacy requests, suggesting that many organizations may not fully understand or comply with their obligations under the law. Responses from the companies varied widely; while some provided the requested data, others failed to respond adequately or mismanaged the requests entirely. These findings emphasize the difficulties consumers face in asserting their rights to privacy and data access. Although the legal framework exists to protect consumer data rights in California, the practical application of these rights is complicated. The experiences documented in the investigation underscore the need for clearer processes and improved communication from companies regarding data access requests, as consumers navigate their rights in an increasingly complex digital landscape.