11
Feb
By Michael Bahar, Frank Nolan and Ali Jessani
Europe’s General Data Protection Regulation (GDPR) fell like a meteor, sending waves of enhanced privacy legislation to distant shores. The tidal wave first came ashore in the US when, in June 2018, the California Consumer Privacy Act (CCPA) was passed. The CCPA’s sweeping privacy protections borrow heavily from GDPR principles and, like its European counterpart, have an ambitious extraterritorial reach which will cause companies around the world to undertake significant compliance efforts.
Three...