secuvy logo
ccpagdprprivacy

CCPA vs GDPR

Secuvy Inc 0 Comments

RegulationGDPRCCPA
Enforcement DateMay 25th, 2018Jan 1st, 2020
Who needs to complyAny Business that collects or processes the data of EU citizens and residentsAny business storing or processing California residents’ information
PenaltiesUpto 4% of the Company Annual Gross Revenue or 20M euros$7500 per incident, per person
Opt-out Right for Personal Information SaleGDPR does not include a specific right to opt-out of personal data salesMust include a “Do not sell my personal information” link in a clear and conspicuous location on a website homepage.
Must not request reauthorization to sell a consumer’s personal information for at least 12 months after the person opts-out
ChildrenGDPR default age for consent is 16, although individual member state law may lower the age to no lower than 13Children aged 13-16 can directly provide consent. Children under 13 require parental consent.
Children’s Online Privacy Act (COPPA) still apply on top of the CCPA’s requirement
Right to DisclosureData Subjects have a right to access their personal data, including receiving a copy and to obtain certain information about the data controller’s processingConsumers have a right to request disclosure of their personal information, and to receive additional details regarding the personal information a business collects and its use purposes, including any third parties with which it shares information
Right to Deletion/EraseData Subjects have the right to request erasure of personal dataA consumer has the right to deletion of personal information a business has collected, subject to certain exceptions
Right to Restrict ProcessingRight to restrict processing of personal data, under certain circumstancesNone, other than right to opt-out of personal information sales
AboutSecuvy Inc
Global Privacy LawsPrevGlobal Privacy LawsMay 2, 2020
Brazil LGPD Privacy LawSeptember 20, 2020Brazil LGPD Privacy LawNext

Related Posts