California residents have a legal right to request the data companies hold on them. One individual tested this right by contacting over 100 businesses. Instead of receiving personal files, they received deletion notices.
The requests were filed under the California Consumer Privacy Act. That law allows residents to ask companies what data they collect and why. It also permits them to demand deletion of that data.
Many companies responded by deleting the requester’s data entirely. That move prevented the companies from providing the originally requested records. The result was a legal loophole that favored business convenience over consumer transparency.
The process required significant time and effort. Each company had its own verification procedures. Some asked for government IDs, while others required notarized forms or complex online portals.
Out of the 100 requests, only a small number returned meaningful data. Most responses were automated or generic. A few businesses required multiple follow-ups before replying at all.
The findings highlight a practical gap in privacy law. Legal rights exist on paper, but enforcing them is often obstructive. The experience shows that compliance can be technically fulfilled without true accountability.
Privacy advocates point to this as a systemic issue. Companies may use deletion as a quick fix to avoid deeper scrutiny. Consumers lose access to information about how their data is used.
The episode offers a clear lesson for anyone considering data requests. Expect delays, hurdles, and minimal output. The law provides a path, but the journey is rarely straightforward.
