Skip to content

The CCPA Regulations require that businesses that buy, receive, sell, or share personal information about more than 10 million Californians disclose metrics within their privacy notices regarding the quantity of data subject requests that they received in the previous calendar year. Among other things, businesses must report the number of deletion requests received.1

Based upon a review of the websites of the Fortune 500, major retailers received an average of 44,704 deletion requests each year. It is important to note, however, that the quantity of deletion requests was heavily skewed by three companies in the retail industry. When those outliers were removed, the average number of deletion requests decreased considerably – the remaining Fortune 500 retailers received on average 482 deletion requests per year.

1 Cal. Code Regs. tit. 11, § 999.317(g) (2021).