DataGrail report indicates surge in data deletion requests, rising costs for compliance

DataGrail's 2025 Privacy Trends Report indicates an 82% increase in data deletion requests, highlighting consumer demand for personal data control. This trend has significantly raised compliance costs for businesses, which now average approximately $1.26 million annually for managing Data Subject Requests (DSRs), reflecting a 43% rise from 2023.

Additionally, pressure surrounding “Do Not Sell” requests has grown, with a recorded 37% increase year-over-year. With the California Privacy Protection Agency intensifying compliance scrutiny, organizations are adjusting their practices. Notably, 41% of DSRs in 2024 came from states with new privacy laws, which signifies a 229% rise from the previous year.

Daniel Barber, co-founder and CEO of DataGrail, noted, “Our 2025 report clearly shows that consumers are taking control over their data privacy rights and are actively exercising those rights by demanding deletion of their data.” IDC's research underscores the need for organizations to focus on data privacy management to mitigate risks associated with fines and lawsuits.

The report also highlights that 69% of organizations violate consumer consent, often ignoring tracking cookie opt-out preferences, which exposes them to regulatory challenges. As consumers prioritize privacy, the data brokerage sector has observed a significant uptick in privacy requests, influenced by formative regulatory concerns and rising consumer awareness about data security.