Commonly confused

GDPR vs CCPA

GDPR is the EU personal data law. CCPA/CPRA covers California consumer privacy rights. Both shape notice and choice.

GDPR

The General Data Protection Regulation GDPR is a comprehensive data privacy and protection law enacted by the European Union. It establishes strict rules for how organizations collect, process, store, and transfer personal data of EU residents, granting individuals significant.

GDPR is an EU law setting strict rules for personal data collection, processing, and storage, granting individuals rights over their information.

Full PathTerms™ definition

CCPA

The California Consumer Privacy Act, or CCPA, is a landmark data privacy regulation granting California residents specific rights regarding their personal information collected by businesses. It establishes a framework for consumers to understand what data is collected, how it.

CCPA grants California residents rights over their personal data, impacting how businesses collect, use, and protect it.

Full PathTerms™ definition

Why it matters

People mix up GDPR and CCPA in exam questions and job posts. Knowing the difference helps you pick the right control, process, or architecture choice.

How to remember the difference

GDPR is the EU personal data law. CCPA/CPRA covers California consumer privacy rights. Both shape notice and choice.

Related exam lists

Study both terms