Reporter's mass data-access experiment exposes CCPA compliance gaps at major firms
A journalist filed over 100 California Consumer Privacy Act data-access requests to major companies, including McDonald's, which returned a 515-page report detailing app behavior and predictive profiling. Many companies mishandled the process—some deleted data instead of disclosing it despite explicit instructions otherwise, while others ignored the contact methods listed in their own privacy policies.