让我的数据离开：数据经纪商对退出和删除请求的合规情况
Let My Data Go: Data Brokers' Compliance with Opt-Out and Deletion Requests
AI总结：
研究数据经纪商对消费者退出和删除个人信息请求的合规情况，通过向加州注册数据经纪商提交相关请求并调查其回复，发现多数合规但部分不合规，存在诸多问题，呼吁简化流程等。
摘要：
数据经纪商主要在美国，收集大量美国成年消费者个人信息且多未经其知晓或同意，数据可售给多方导致诸多危害。近期法规赋予消费者一些权利，但行使不易。研究向加州注册数据经纪商提交退出和删除请求，发现多数虽合规但部分不合规，还存在诸多问题，急需简化流程等。
英文摘要：
Data brokers are a largely American phenomenon. They collect vast amounts of personal information about most adult U.S. consumers, mainly without the latter's knowledge or consent. Accumulated data can be sold to anyone, including employers, landlords, insurance agencies, banks, governments (local, state, federal, and even foreign), as well as various malicious actors. This, in turn, enables discrimination, surveillance, identity theft, and stalking. Recent regulations -- such as the California Consumer Privacy Act (CCPA) modeled after EU's General Data Protection Regulation (GDPR) -- were introduced to bolster consumer privacy, e.g., the rights to: (1) opt-out of the sharing or selling one's personal information, (2) delete one's personal information, and (3) obtain a copy of that information. However, exercising these rights is not easy, as shown by our comprehensive study of the data broker ecosystem. We submitted both opt-out and deletion requests (using synthetic consumer identities) under the CCPA to all California-registered data brokers and investigated their responses and lack thereof. While the majority seem to be compliant, a significant fraction is not and many failed to reply to (and/or acknowledge) consumer requests. Furthermore, some data brokers require intrusive consumer identity verification in order to exercise one's opt-out rights, which is explicitly disallowed by the CCPA. There is also great disparity in the request submission process among data brokers as well as an extremely heavy (time and effort) overall consumer burden. This motivates an urgent need for streamlining and standardization of the consumer interface, stronger enforcement, and meaningful consequences for (especially sustained) non-compliance.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
