The DSR Has Changed Under Your Feet: What Privacy Teams Are Actually Up Against

Data Subject Requests have evolved significantly, with deletion requests now dominating the workload rather than being rare. Deletion is described as a write operation across every system that touches a person, plus proof it was done and a defensible audit trail. Organizations face mounting complexity as personal data spans cloud services, SaaS platforms, collaboration tools, and AI systems, with California’s new DELETE Act adding strict compliance deadlines and cascade requirements across data brokers.