WIRED reporter's 100 CCPA data requests reveal widespread compliance failures
A WIRED journalist filed data access requests with more than 100 companies under the California Consumer Privacy Act, seeking to see what personal information had been collected. Instead of providing the requested data, many firms sent deletion confirmations the reporter never asked for, or refused to honor the contact method listed in their own privacy policies. McDonald's, notably, returned a 515-page file detailing app usage and predictive behavioral profiling.
GoKawiil's interpretation of the reporting above, not reported fact.
The findings expose how privacy laws like the CCPA depend heavily on voluntary corporate compliance, with little enforcement muscle to catch companies that mishandle or ignore consumer requests. As more states weigh similar privacy statutes, this experiment suggests that legal rights on paper don't guarantee functional access in practice, leaving consumers to fight bureaucratic friction just to see what's been collected on them.
- Over 100 CCPA access requests were filed; many companies replied with deletion notices instead of data.
- McDonald's returned a 515-page report detailing granular app behavior and purchase predictions.
- Consumer advocates say the results show current privacy law enforcement relies too much on company goodwill.
Yubico YubiKey 5C NFC Security Key — If reading about how much data companies quietly hoard on you makes you want to lock things down, a hardware security key is the strongest practical step you can take for your accounts. The YubiKey 5C NFC works over USB-C and taps against a phone via NFC, so your logins are protected everywhere you go.
See Yubico YubiKey 5C NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: wired.com — Reece Rogers, 2026-08-28
Published there as: “I Asked 100 Companies for My Data. I Got Deletion Notices Instead”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.