// data rights

All signals tagged with this topic

Companies Are Deleting Customer Data Rather Than Complying With Access Requests

When consumers invoke data access rights under GDPR, CCPA, and similar regulations, some companies are destroying records instead of handing them over. This exposes enforcement gaps in privacy law and suggests compliance infrastructure is often performative. The companies making these deletions likely calculate that regulatory risk is lower than the operational burden of data retrieval. Privacy regulations, in other words, work only as well as their consequences for violation.

Court Rules Google's Data Can Be Scraped Like the Web It Built

A federal judge has essentially told Google it can't block scraping of its own services after building its empire on doing exactly that to others. This creates immediate practical problems for Google's business model—Search ads depend partly on controlling who sees what results—while opening a playbook for competitors and researchers to build alternative search indexes without negotiation. The ruling exposes a core tension in Big Tech: these companies claim to operate by "open internet" principles they systematically violate through terms of service, making legal precedent increasingly hostile to their control mechanisms.