I filed a request with McDonald's to access my personal data and received a staggering 515-page report. Under the California Consumer Privacy Act, I have the right to request this information from companies that collect personal data. My curiosity led me to send over 100 requests to various companies. Most companies had to list two ways to file this request, often via a web form, phone number, or email address as detailed in their privacy policy. However, the process was incredibly time-consuming, and many companies either refused to process the request or responded with messages about deleting the data, which I explicitly said not to do.

The experience highlighted the weaknesses of policy frameworks that rely on companies to act responsibly. Consumer advocates are upset with how these requests were handled, with Ben Winters, director of AI and privacy at the Consumer Federation of America, stating that this is not an acceptable status quo. The CCPA’s provisions, which include the right to opt out of the selling of personal information, the right to delete that info, and the right to request a copy for yourself, are meant to empower consumers, but the process is far from seamless.

My journey to understand what data is being collected on me is a testament to the complexity and challenges of data access. While some companies complied, others did not, and the process was fraught with challenges. It raises questions about the practicality and effectiveness of such laws in reality.

Given the time-consuming nature of the process and the inconsistent responses, one might wonder if data access is truly a right or just a bureaucratic nightmare. The experience underscores the need for clearer and more effective policies to ensure that consumers can exercise their rights in a straightforward and transparent manner.