The California Consumer Privacy Act, or CCPA, goes into effect on January 1, 2020. And while there will be a “grace period” for enforcement, you want to ensure that you fully understand the regulation and are working towards compliance before that date. This is the first regulation of its kind in the United States, but it has a lot in common with the a 2018 data privacy regulation overseas, called GDPR.
In 2018, the European Union (EU) introduced the modern age of data privacy with the institution of the General Data Protection Regulation (GDPR). This privacy law — with worldwide reach — set new standards for the collection, handling, sharing, and protection of personal information.
Shortly after the GDPR’s release, the California Consumer Privacy Act (CCPA) was passed, bringing GDPR-inspired privacy measures to California. Like the GDPR, the CCPA applies to companies worldwide that target its respective subjects (for the CCPA, that’s Californian consumers, while the GDPR protects most Europeans).
Although the laws share common ground, there are notable distinctions between the two. Complying with the CCPA doesn’t equate to complying with the GDPR — or vice versa.
To understand the similarities and differences between these two complex laws and begin complying with both, check out Termly’s CCPA vs GDPR infographic below: