GoKawiilReporter's mass data-access experiment exposes CCPA compliance gaps at major firms
A journalist filed over 100 California Consumer Privacy Act data-access requests to major companies, including McDonald's, which returned a 515-page report detailing app behavior and predictive profiling. Many companies mishandled the process—some deleted data instead of disclosing it despite explicit instructions otherwise, while others ignored the contact methods listed in their own privacy policies.
GoKawiil's interpretation of the reporting above, not reported fact.
The findings reveal that privacy laws like the CCPA depend heavily on voluntary corporate compliance, with little real enforcement forcing companies to follow proper procedure. This raises doubts about whether consumers can meaningfully exercise their data rights even in states with some of the strongest privacy protections in the US.
- McDonald's app data report ran 515 pages and included predictive consumer behavior analysis.
- Some companies deleted requester data instead of providing access, contrary to explicit requests.
- Consumer advocates say the inconsistent responses highlight structural weaknesses in privacy law enforcement.
Yubico YubiKey 5 NFC Security Key — If an article about how much personal data companies hoard makes you want to lock things down, a hardware security key is the strongest practical step you can take. The YubiKey 5 NFC plugs into USB-A or taps to your phone over NFC to protect your accounts with phishing-resistant two-factor authentication.
See Yubico YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: arstechnica.com, 2026-08-29
Published there as: “I asked 100 companies for my data. Some deleted it instead.”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.