[xmodem]

Which category are you in?

I just submitted an access request under the EU resident category. If I don't get a response I will consider making another request in writing.

[hellcow]

CCPA here. I submitted an info request, a data-deletion request, and an opt-out request. I got 0 responses.

At what point does an investigator take a look at this?

[xmodem]

I would hope the state of California would care. I have no idea how you're meant to try to enforce your rights under CCPA other than by hiring a lawyer.

I filed a complaint with my local data protection authority a couple of years back. We had to integrate a credit reporting API and I noticed that it required no authentication other than a username. I also observed that who was preforming the check was a field we could specify in the request and it was not validated (I did a check on myself with the SoapUI default of '?'). I did not receive a response. So unfortunately I think our options for actually enforcing our rights are probably limited.

Still, I guess we'll find out if Clearview takes GDPR any more seriously than CCPA.