California's Data Access Law: Right on Paper, Elusive in Practice
California law grants residents the legal right to access data that companies collect about them. However, actually exercising this right can be far more complicated than the law suggests.
One California resident recently put this right to the test by submitting data access requests to more than 100 companies. The expected outcome would be receiving copies of whatever personal information these companies had collected. Instead, many companies responded with deletion notices—effectively erasing data rather than providing access to it.
This response pattern highlights a disconnect between what consumers are legally entitled to and how companies choose to comply. Rather than transparently sharing what data they hold, some organizations appear to interpret the request as an opportunity to tidy their databases.
The experience underscores ongoing challenges with data privacy enforcement. While legislation like the CCPA establishes consumer rights on paper, actual compliance can vary significantly across companies and industries. Advocates argue this gap between legal frameworks and real-world practices demonstrates the need for stronger enforcement mechanisms and clearer guidelines for businesses.