2022 Data Privacy Trends: A CCPA Report

Table of Contents

01 Introduction
02 Current state of CCPA
03 Privacy Trends
04 The Data Challenge
05 Takeaways
06 Glossary
07 DataGrail Approach

01 Introduction

Understanding the Data

DataGrail is back with our annual, the State of the CCPA, for the second year in a row. We help companies build robust programs by automating the process of completing privacy requests (otherwise known as data subject requests) and data mapping, giving us unparalleled insights into how privacy is evolving, particularly how fast people and businesses are adapting. This report analyzed how many data subject requests (DSRs) were processed throughout 2021 across our customers, resulting in a powerful industry benchmark of what to expect as the ripple effect of data privacy regulations takes hold.

With our second annual CCPA report, we can reflect on what happened over a broader data set while spotting new trends taking shape.

We took a data deep dive to figure out:

• Industry trends that will carry on into 2022
• The cost associated with emerging privacy regulations
• What to expect with the upcoming CPRA

Entering the era of privacy may be messy and complicated, but our hope is that this research will help organizations benchmark how well they are doing relative to peers, and identify steps they can take to maximize trust while minimizing risk.

Key Findings

• 2x The # of DSRs nearly doubled year over year
• 84 Average number of deletion requests per 1M identities
• $400k Cost of processing DSRs per 1M identities (more than doubled from 2021)
• 63% Of total requests are DNS requests*, and they are accelerating
• 26-50 Employees involved in the manual processing of DSRs
• 50% Of SaaS apps are missed with manual data maps

*For organizations that are currently required to offer DNS DSRs come from every state, which will impact how businesses deal with privacy concerns over the short and long-term. D.C & California may have the most, but Washington, Colorado, Illinois, and Virginia closely follow.