āļ‚āđ‰āļēāļĄāđ„āļ›āļĒāļąāļ‡āđ€āļ™āļ·āđ‰āļ­āļŦāļēāļŦāļĨāļąāļ

CCPA/CPRA Compliance (California Consumer Privacy Act) → European Union (GDPR) 🇊🇚

Regulation 2016/679 · EDPB + 27 national DPAs

From 125,000-385,000 āļšāļēāļ—21-60 working days

CCPA/CPRA Compliance (California Consumer Privacy Act) for European Union (GDPR) must align with Regulation 2016/679 — supervised by EDPB + 27 national DPAs with max fines of ₮20M or 4% global turnover.

Partner network — Bird & Bird, OneTrust, BSI, DNV — for ISO certification, cross-border SCC, EU representative service.

European Union (GDPR) legal regime: Regulation 2016/679 — enforced by EDPB + 27 national DPAs with max fines of ₮20M or 4% global turnover. Schrems II — TIA required for transfers to non-adequate countries (including Thailand).

Breach notification: 72 hours — 24/7 incident hotline available.

End-to-end: CCPA/CPRA Compliance (California Consumer Privacy Act) → mapping → control implementation → EDPB + 27 national DPAs registration (where applicable) → ongoing audit.

95% DSAR backlog reduction — automated DSAR portal + 30-day SLA + audit trail.

How it works

  1. 1

    Map Regulation 2016/679

    Compliance plan aligned with EDPB + 27 national DPAs.

  2. 2

    Prepare CCPA/CPRA Compliance (California Consumer Privacy Act)

    21-60 working days at 125,000-385,000 āļšāļēāļ—.

  3. 3

    Transfer mechanism

    SCC + BCR + TIA + adequacy assessment as required.

  4. 4

    Local representative

    EU Art. 27 representative — partner in Frankfurt/Dublin.

  5. 5

    DPA registration

    Notification/filing with EDPB + 27 national DPAs where required.

  6. 6

    Ongoing monitoring

    Quarterly review + annual audit + breach drill + DSAR queue monitoring.

Frequently asked questions

Which law applies in European Union (GDPR)?

Regulation 2016/679

Supervisory authority?

EDPB + 27 national DPAs

Maximum fine?

₮20M or 4% global turnover

Breach window?

Within 72 hours.

Market-specific caution?

Schrems II — TIA required for transfers to non-adequate countries (including Thailand).

Local representative required?

Yes — EU Art. 27 / UK representative.

Cross-border transfer requirements?

SCC + TIA + (for CN/RU) data localisation + government security assessment.

Related services