3 ms·
CCPA has enough common elements with GDPR that companies are likely to look for a set of practices that meets both in as many cases as possible. I'm hopeful tha
by ocdtrekkie 7y ago
CCPA has enough common elements with GDPR that companies are likely to look for a set of practices that meets both in as many cases as possible. I'm hopeful that while the CCPA may lack the full width of GDPR's effect, it will push companies that were special-casing the EU to apply GDPR practices to the US as a whole as well or the entire world.
Very few companies are going to want to maintain a separate GDPR strategy, a separate CCPA strategy, and an unregulated strategy, and then selectively apply each to various users. As more jurisdictions jump on board with privacy requirements, hopefully globally consumers will get the benefits of the strongest passed regulation in each category.
- ed 7y agoBut there is no CCPA strategy. CCPA is so weak that compliance is easy: offer data exports and stop selling data on behalf of the handful people who request it. No need to encrypt stored data, or restrict what you collect, or how you collect it.