The CCPA Regulations require that businesses that buy, receive, sell, or share personal information about more than 10 million Californians disclose metrics within their privacy notices regarding the quantity of data subject requests that they received in the previous calendar year. Among other things, businesses must report the number of deletion requests received. 1

A review of the websites of the Fortune 500 indicates that only one health care company disclosed its data subject request metrics. While the limited quantity of companies that reported metrics makes extrapolating trends or conclusions impossible, the company that reported indicated that it received 12,395 requests for deletion.

1 Cal. Code Regs. tit. 11, § 999.317(g) (2021).