The CCPA is similar to the European Union’s General Data Protection Regulation (GDPR), which came into effect in May 2018, in that they both give rights to consumers over their data and define responsibilities. However, the GDPR imposes additional obligations, such as the requirement to ensure that personal data is protected as it crosses borders, and requiring businesses to follow certain rules regarding notice to individuals and regulators when a data breach occurs.