Results, as they say, may vary. Politico published a report earlier this month examining the data privacy request disclosures that companies are required to make under the California Consumer Privacy Act (CCPA), which showed large variances in the number of data deletion petitions received by major tech companies such as Apple, Microsoft and Google. 

So is the CCPA ineffective, or does it just need a better way to measure success? The answer may depend on what one considered the purpose of the law to be in the first place. "If you viewed CCPA's goal as sort of empowering the citizenry to control their data, I think what these numbers show is that the citizenry isn't as interested in that as the authors of the CCPA thought they would be," said David Saunders, a partner with McDermott Will & Emery.