
These findings show that data privacy legislation can have a significant effect on a business’ bottom line – and this is based on a sample from just one state. This is a lot of data that companies could be held responsible for under new legislation!
third-party consumer apps accessed by the Internet or software not supported by the company’s IT department that was perhaps downloaded by an employee) when processing requests. DataGrail’s research indicated that companies miss data in up to 50% of shadow SaaS apps (i.e.
Companies run so many different SaaS apps today to perform business functions that it becomes a bit of a tangled mess in terms of where all the data lies.
Part of the processing issue stems from not knowing where all of consumers’ data lies. Again, this nearly doubles the specific deletion requests of the year before in 2020 there were 43 deletion requests per 1M identities. Companies were asked to erase user information from their systems permanently and completely for 84 per 1M identities in 2021. More involved data deletion requests could be partially to blame. According to DataGrail’s research, approximately 26-50 employees were involved in processing a single DSR at companies using manual processes, with the day-to-day privacy employees allocating 2-4 months (60-130 man-hours) a year to sustaining compliance. This is largely due to the cost of employee time dedicated to data privacy. Doing the math, this means that companies manually processing DSRs spent about $400,000 per million records last year – more than 2.5x the previous year. Gartner research estimates that it costs businesses approximately $1,524 dollars to process a single DSR. This translates to significant costs to organizations. This spike has already placed an enormous strain on businesses required to handle high volumes, but requests are expected to continue trending upward – both in California and in additional states as legislation is enacted. Looking across all access, modify, and delete requests, the numbers increased from 137 requests per 1 million identities to 266 requests per 1 million identities. In fact, companies processed almost double the number of requests in 2021. The volume of requests has increased substantially year-over-year.