Request Type | Requests Received | Requests Compiled (in whole or in part) | Requests Denied** | Mean Time to Resolution | Median Time to Resolution |
Deletion* | 6,720 | 6,641 | 79 | 17 hours 29 mins | 6 hours 59 mins |
Correction | 7,923 | 7,909 | 14 | 2 days 20 hrs | 2 days 11 hrs |
Opt-out of sale/sharing | 9,987 | 9,987 | 0 | 2 days 20 hrs | 2 days |
Access Request/Right to Know | 142 | 142 | 0 | 17 hours 29 mins*** | 6 hours 59 mins |
* Deletion Requests received include third-party requests made on behalf of individuals.
** Denied Requests include requests from unverifiable and unidentifiable email addresses as well as disposable emails. In these cases, we are unable to verify the request as originating from the data subject as outlined in GDPR Chapter 3, Article 12 (6).
In the case of third-parties submitting requests on behalf of the individuals they represent, these are denied if they lack one of the following:
Data subject’s full name
Proof of Authorization (POA or LPOA): a valid, signed authorization from the data subject, clearly defining the scope of authorization
A verifiable email address attributable to the data subject
***Access/Right to Know requests usually coincide with deletion requests. In these cases, we can assume around the same amount of time for resolution as the deletion requests.
In most cases, deletion was requested in full under the applicable provisions of California Civil Code sections 1798.145 or 1798.146. Requests received in 2025 where only partial deletion was requested were negligible, representing <0.1% of all requests.
This data reflects requests received in 2025 from all individuals.