Comparing CCPA to GDPR – 2021

Item		CCPA	GDPR
Scope	N	CA residents personal data collected	EU personal data processed
Right to access	N	Right to access California personal data collected in the last 12 months, delineated between sold and transferred	Right to access all EU personal data processed
Right to portability	N	All access requests must be exported in user friendly format	Most export and import certain EU personal data in a user friendly format
Right to correction	X	Not included in CCPA	Right to correct errors in EU personal data processed
Right to stop processing	N	Right to opt-out of selling personal data only; must include opt out link on website	Right to withdraw consent
Right to stop automated decision making	X	Not included in CCPA	Right to require a human to make decisions that have a legal effect
Right to stop third party transfer	N	Right to opt-out of selling personal data to third parties	Right to withdraw consent for data transfers involving second purposed of special categories of data
Right to erase data	⩬	Right to erase personal data collected, under certain conditions	Right to erase EU personal data, under certain conditions
Right to equal services and price	B	Explicitly required	At most, implicitly required
Private right to action of damages	N	Min $100, Max $750 per consumer per incident	No min/max
Regular enforcement penalties	B	Ceiling of 4% of global annual revenues	No ceiling – $7,500 per violation