Privacy6 min read

GDPR vs. CCPA: Two Models for Privacy

The EU and California took different paths to protect personal data, with different tradeoffs.

Coming soon

This explainer is planned but not yet fully written. The summary below provides an overview; the full analysis with charts, stakeholder breakdowns, and citations is in progress.

GDPR requires opt-in consent for data collection; CCPA requires only opt-out rights. These different defaults create different incentives for platforms and different levels of practical protection for users.