{"id":9770,"date":"2023-02-03T11:23:39","date_gmt":"2023-02-03T10:23:39","guid":{"rendered":"https:\/\/actonic.de\/?p=9770"},"modified":"2023-03-23T08:09:43","modified_gmt":"2023-03-23T07:09:43","slug":"ccpa-and-cpra-why-do-they-even-matter-for-eu-companies","status":"publish","type":"post","link":"https:\/\/actonic.de\/en\/ccpa-and-cpra-why-do-they-even-matter-for-eu-companies\/","title":{"rendered":"CCPA and CPRA: Why do they even matter for EU companies?"},"content":{"rendered":"

[vc_row][vc_column][vc_column_text]<\/p>\n

Your company is located in EU and you think CCPA doesn\u2019t impact you?<\/p>\n

Guess wrong. Read on, and we’ll explain why your European business probably needs to be CCPA and CPRA compliant, too.<\/p>\n

How does the CCPA affect European companies?<\/h2>\n

Although these regulations are based in California, they have global effects and may also apply to companies in the European Union (EU). <\/strong>This is because CCPA and CPRA cover companies that collect and process personal data of California residents, regardless of where the company is located.<\/p>\n

The EU has its own data privacy law, the General Data Protection Regulation (GDPR),<\/strong><\/a> which applies to companies that process personal data of EU citizens. CCPA and CPRA are similar to the GDPR in many ways and share many of the same principles, such as data privacy, data security and data safety.<\/p>\n

When your European company should be CCPA compliant<\/h2>\n

However, GDPR is applied on a much bigger scale and includes all organizations handling EU citizens’ data, <\/strong>irrespective if the business is based in Europe or outside.\u00a0There are no other criteria for assessing whether one must comply with the law.<\/p>\n

The CCPA, on the other hand, is enforced if a company collects data from California citizens AND falls under the following criteria:<\/strong><\/p>\n

    \n
  1. \n

    If a company has revenue of more than\u00a0$25 million<\/strong>\u00a0or gains 50% from selling personal data.<\/p>\n<\/li>\n

  2. \n

    If a company processes data of more than 50,000 users, <\/strong>it is upgraded to 100,000 users with CPRA<\/strong>.<\/p>\n<\/li>\n<\/ol>\n

    The CCPA and CRPA apply to any businesses operating in California or anywhere in the world that meet the threshold and profit from collecting data on California residents and meet the revenue and data processing threshold.<\/p>\n

    [\/vc_column_text][vc_column_text el_class=”info-box-simple”]<\/p>\n

    Read a comparison of different worldwide regulations in our article: Data Privacy Laws explained.<\/strong><\/a><\/p>\n

    [\/vc_column_text][vc_column_text]<\/p>\n

    Both regulations are equivalent to the European privacy law GDPR that the European Union drafted on May 25, 2018. Although CCPA and GDPR share the same purpose, their principles and regulations differ.<\/p>\n

    What do the guidelines look like?<\/h2>\n

    In order to comply with the CCPA and CPRA, companies must follow certain guidelines, as we already described in our latest article.<\/strong><\/a> These include, for example, providing California residents with clear and concise information about their data privacy rights, giving them access to their data and accurate statistics of the data collected and processed.<\/p>\n

    For non-compliance, CCPA and CPRA fines range from $100 to $7,500 per violation.<\/strong><\/p>\n

    How to comply with CCPA in Europe<\/h2>\n

    Suppose your company is located in Europe and sells, shares, or collects personal data of California residents; in that case, it is crucial to be aware of the CCPA and CPRA regulations.<\/p>\n