AI, California DROP, and the New Operating Model for Data Subject Rights
OneTrust, Monday, August 3rd, 2026
OneTrust argues manual data subject rights workflows cannot absorb California DROP and AI-driven request volume.
OneTrust argues that California DROP enforcement combined with a surge in AI-generated privacy requests is forcing privacy teams to rethink data subject rights handling.
Manual DSR workflows cannot absorb the incoming volume or meet auditability expectations. The mismatch is structural rather than a staffing shortfall.
OneTrust lays out a new operating model built around automation and verifiable process records.