Data is one of today’s most important commodities. Along with its increasing prominence in digital business comes an increasing need to regulate its collection, processing, and sale. Leading the new age of data privacy legislation are two important laws: the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
While the GDPR is based in Europe, the law applies to any business that collects data from residents of the European Economic Area (EEA) — regardless of where the business itself is located. Similarly, the CCPA is based in California, but applies to any business that collects information about California residents.