
Will the CCPA entitle the State of California to adequate status for transfers of personal data from the EU?
“The CCPA has many of the basic criteria that the EDPB’s adequacy guidance document notes must be present in the legal system to meet the adequacy standard. For example, the CCPA employs a similarly expansive definition of ‘personal information’ as the GDPR (defined as ‘personal data’), provides a similar right of access/knowledge to the consumers as the GDPR does to individuals in the EU, and appears to imply the necessity of a legal basis for data collection/processing. But, the CCPA differs from the GDPR on several key issues. If California does decide to apply, the state will likely need to negotiate with the EU to address these differences.”
Read the full story in Lawfare.