GDPR and CCPA Compliance
In May 2018, the European Union (EU) enacted a new law, the General Data Protection Regulation, or GDPR.
In January 2020, California became the first U.S. state to enact a consumer privacy law, the California Consumer Privacy Act, or CCPA.
Both of these laws are comprehensive and have a broad reach, and each rule has had a significant impact on businesses that collect and process personal data.
Let's break them both down separately to help you understand the differences, responsibilities, and penalties for non-compliance or mistakes.
Important GDPR Information You Need to Know
Who is Protected by GDPR?
Data subjects, defined as identified or identifiable persons to which personal data relates.
What Data is Protected by GDPR?
Personal data is any information relating to an identified or identifiable data subject. The GDPR prohibits the processing of defined special categories of personal data unless a lawful justification for processing applies.
What are the Penalties and Civic Fees for Non-Compliance of GDPR?
Administrative fines can reach EUR20 million or 4% of annual global revenue, whichever is highest. EU Member States can impose their penalties on infringements of the GDPR that are not subject to administrative fines under Article 83, GDPR.
Request a quote, and we'll audit your customer data handling processes and ensure you are compliant.
Important CCPA Information You Need to Know
Who is Protected by CCPA?
Consumers, defined as California residents that are either:
- In California for other than a temporary or transitory purpose.
- Domiciled in California but are currently outside the State for a temporary or transitory purpose.
Consumers include customers of household goods and services, employees, and business-to-business transactions.
What Data is Protected by CCPA?
Personal information that identifies relates to, describes, is capable of being associated with, or may reasonably be linked, directly or indirectly, with a particular consumer or household. The statutory definition includes a list of specific categories of personal information.
Personal information does not include certain publicly available government records. The CCPA also excludes certain personal information covered by other sector-specific legislation from its coverage scope.
What are the Penalties and Civic Fees for Non-Compliance of GDPR?
The California AG may bring actions for civil penalties of $2,500 per violation, or up to $7,500 per violation if intentional. However, the CCPA also grants businesses a 30-day cure period for noticed violations.
Request a quote, and we'll audit your customer data handling processes and ensure you are compliant.