General Data Protection Regulation (GDPR)

The General Data Protection Regulation 2016/679 is a regulation in EU law on data protection and privacy in the European Union and the European Economic Area. It also addresses the transfer of personal data outside the EU and EEA areas.

[ccpa] is the counterpart in California but nlike the GDPR, the CCPA provides several specific carve-outs from its scope of application, such as medical information and protected health information. The CCPA also excludes personal information the transfer of data to a third party in the context of a merger (from the definition of “selling”).

---