For attorneys feeling weary chasing the turbulent, fast-growing patchwork of data privacy laws around U.S. states and beyond, there is another player in town they might want to keep an eye on: data subject access request (DSAR) aggregators.

DSAR aggregators, or providers which automate DSARs on behalf of consumers for a small fee, first started to crop up a few years after the General Data Protection Regulation (GDPR) went into effect in 2018. Today, there are a handful of such companies—including Mine, PrivacyBee, Revoke and DeleteMe, among others—meaning attorneys have likely noticed an increasing number of emails that are apparently advocating for a consumer's privacy right.