qualitylab

Rights and compliance · Observability

Drive your own deletion and opt-out paths with a canary account

tier II/cost to adopt: medium/active

An opt-out or deletion path is only real if it has been driven end to end by something that then checks the backing stores, because the front end confirms success independently of whether anything downstream changed.

Do this firstTest the consent dialogue against the law, not the vendor default

Run a synthetic account through the flow a stranger would have to use, then query the warehouse, the replicas and the backups and confirm the data is gone within the promised window.

Both halves fail in measurement. The front end fails on findability — in lab testing, people routinely could not locate the controls at all, fell back to help pages or emailing support, and misunderstood what a written request needed to contain. The back end fails on propagation, and the propagation numbers are the more alarming: implemented does not mean honoured, and honoured by you does not mean honoured by the seventeen third parties you forward to.

This is the sector’s defining shape. Nobody notices any of it. There is no outage, no error rate, no page — the obligation is simply unmet, from day one, until somebody checks on purpose.

The decoy

Implementing the opt-out API. Adoption is not behaviour: of publishers who had implemented it, only 46.1% actually flipped their signal when a real opt-out was sent, and only 17.9% of downstream chains propagated it at all.

Evidence

Last reviewed 2026-08-19.