Ars Technica: 100 Companies Asked for Data; Some Deleted It Instead

Ars Technica conducted a test by requesting personal data from over 100 companies, exercising rights granted under the California Consumer Privacy Act (CCPA). The experiment revealed varied responses from businesses regarding data handling.

One request to McDonald's for app interaction data resulted in a 515-page report detailing user activity and predicting future behavior, aligning with the CCPA's provision allowing individuals to request a copy of their data.

Conversely, some companies chose to delete the requested information rather than providing it. The CCPA, effective since 2020, grants consumers rights to access their data, opt out of its sale, and request its deletion.

The test highlighted differing corporate approaches to data privacy and legal compliance. Ars Technica, based in Culver City, continues to examine consumer rights and company data protection practices.