Privacy6 min read
GDPR vs. CCPA: Two Models for Privacy
The EU and California took different paths to protect personal data — with different tradeoffs.
Coming soon
This explainer is planned but not yet fully written. The summary below provides an overview; the full analysis with charts, stakeholder breakdowns, and citations is in progress.
GDPR requires opt-in consent for data collection; CCPA requires only opt-out rights. These different defaults create different incentives for platforms and different levels of practical protection for users.