I asked 100 companies for my data: Some deleted it
Testing privacy requests across 100 companies reveals widespread confusion, dead ends, and unexpected data deletions.
Stock photo for illustration only, not from the actual event
- Privacy requests were sent to 100 different companies
- The experiment uncovered widespread confusion and dead ends
- Some organizations chose to delete data instead of fulfilling requests
Navigating personal data rights in the modern digital landscape remains a significant challenge for everyday consumers. A recent practical test involving privacy requests sent to 100 distinct companies aimed to uncover how organizations handle data access rights, yielding surprising and troubling results.
Rather than smoothly providing the stored information back to its rightful owner, the process frequently resulted in organizational confusion. Consumers attempting to exercise their rights routinely hit administrative roadblocks and dead ends.
This experiment highlights persistent operational gaps in global data privacy frameworks like GDPR and CCPA. While regulations grant users the right to access their information, many corporate entities lack the infrastructure to handle these requests efficiently, often resorting to drastic shortcuts such as complete data deletion to avoid compliance burdens.
Even more alarming was the discovery that certain companies opted to permanently delete the user's data outright instead of processing the legitimate access request, effectively undermining the core intent of privacy legislation.
Source: Ars Technica
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment