Comparing Key Points of the GDPR and CCPA: What You Need to Know

On May 25, 2018, the General Data Protection Regulation (GDPR) became enforceable in the European Union (EU) and on June 28, 2018, the California Consumer Privacy Act (CCPA) was enacted. Both of these laws significantly impact companies that process personal data. For companies subject to both laws, an understanding of how the laws overlap (or don't) may help streamline compliance efforts. We have created a chart that outlines selected similarities and differences between the GDPR and the CCPA including the general applicability, the definition of personal information, notice to individuals, and individual rights and control. It is not intended to cover every obligation imposed by the GDPR and CCPA, but rather is meant to highlight where the GDPR and CCPA have analogous yet differing obligations.