Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 10 SEPTEMBER 2018

California Consumer Privacy Act – GDPR 2.0?

Mason Hayes & Curran LLP
Mason Hayes & Curran LLP
Contributor
Mason Hayes & Curran LLP

Mason Hayes & Curran LLP

Managing Partner: Will Carmody Chair: Philip Nolan Number of partners: 124 Languages: French,...

View firm profile
Explore more from Mason Hayes & Curran LLP

Shortly after the European Union's General Data Protection Regulation (GDPR) came into force in May 2018, California passed its own sweeping privacy legislation, the California Consumer Privacy Act of 2018 (CCPA).

United StatesPrivacy
Oisin Tobin
Oisin Tobin
Author LinkedIn connections

Shortly after the European Union's General Data Protection Regulation (GDPR) came into force in May 2018, California passed its own sweeping privacy legislation, the California Consumer Privacy Act of 2018 (CCPA). So what are the key similarities and differences between the two laws?

Extraterritorial reach

Similar to GDPR's extraterritorial reach, the CCPA may apply to businesses without a physical presence in California. The GDPR applies to any business that offers goods or services to data subjects in the EU or monitors the behaviour of EU data subjects. In contrast, the CCPA applies more narrowly to entities that determine the purposes and means of processing personal information pertaining to California residents and meet one of three thresholds:

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

SB 54 Is In Effect: What California’s New Packaging Law Means For Your Business

Although being challenged by an injunction filed on August 20, 2026, by a coalition of 17 states, California’s SB 54 Plastic Pollution Prevention and Packaging Producer Responsibility Act is now in effect, and companies that sell, distribute, import, or ship packaged products into California should be evaluating whether they have compliance obligations.
United StatesPrivacy
Wilson Elser Moskowitz Edelman & Dicker LLP
Wilson Elser Moskowitz Edelman & Dicker LLP
Article

California’s 2026 Legislative Session Wraps: A Wave Of Privacy And AI Bills Reaches The Governor, With Key Child Safety And AI Measures Signed Into Law

California's 2026 legislative session concluded with Governor Newsom signing several landmark privacy and AI bills into law, including comprehensive child safety measures, AI auditor oversight frameworks, and expanded data protection requirements. How will these new regulations reshape digital advertising, workplace AI deployment, and online platform obligations for businesses operating in California?
United StatesPrivacy
Kelley Drye & Warren LLP
Kelley Drye & Warren LLP
Article

Eleventh Circuit Developments: Decisions On Florida And Georgia Social Media/Minor Laws And New Alabama Law

Legal risk intensifies for companies offering online interactive features to minors across Georgia, Florida, and Alabama as the Eleventh Circuit vacates preliminary injunctions against state social media laws. With Florida's HB 3 and Georgia's SB 351 now enforceable and Alabama's HB 161 set to take effect January 1, 2027, businesses face divergent compliance requirements including age verification, parental consent mechanisms, and account deletion protocols.
United StatesPrivacy
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

California's Fall 2026 Privacy Roundup: Expanded CCPA Deletion Rights And More

California Governor Gavin Newsom has signed several significant privacy bills that will reshape how businesses handle consumer data, including expanded deletion rights under the CCPA, shortened data broker response cycles, and sweeping new insurance sector privacy requirements. While one landmark bill banning the sale of sensitive personal information was vetoed, the approved legislation requires companies to update their deletion workflows...
United StatesPrivacy
McDermott Will & Schulte
McDermott Will & Schulte
Article

The Data Breach Brief: Week Of September 30th, 2026

Multiple organizations have recently disclosed significant data breaches affecting thousands of individuals, with compromised information ranging from basic contact details to highly sensitive medical records and financial data. The incidents span various sectors including healthcare, insurance, and professional services, raising questions about the scope of exposure and potential remedies for affected individuals.
United StatesPrivacy
Morgan & Morgan
Morgan & Morgan