I've always wondered how this works with CCPA. I attempted to exercise my right to data deletion and was directed to log in. Do those with shadow accounts not have the right to have their data deleted?
If you and I are friends, is the knowledge of that friendship mine? Is it yours? Can I freely share that knowledge with someone else? The impact of this just became so absurdly large when we started saving those data points forever and mining them for all sorts of purposes they weren't originally intended for.
It’s definitely a gray area.
Or that’s how I understood it anyway, correct me if I’m wrong.
The real issue is that CCPA can only be enforced by the California Attorney General's office. This means that Facebook's violation of CCPA is, quite literally, as much of a political issue as a legal one. (CCPA's private right of action only applies to data breaches, not to other CCPA violations.)