Download Publication

This document serves as a mapping exercise between the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR) and the CSA Code of Conduct for GDPR Compliance (CoC). 

The document includes:

 • A mapping between CCPA provisions, GDPR articles and CoC controls;

 • A gap analysis comparing the CoC to the CCPA, with the goal of identifying CCPA provisions which may create obligations for cloud service providers adhering to the CoC which are not fully covered by the CoC as of today;

 • Compensating controls (i.e., the specific sections of CCPA provisions which are not fully covered by the CoC as of today).