比較 CCPA 和 GDPR

CCPA 與 2018 年 5 月生效的歐盟《通用數據保護條例》(GDPR) 相似，兩項法規都賦予消費者對其數據的權利，并定義了責任。但是，GDPR 規定了額外的義務，例如要求確保個人數據在跨境后受到保護，以及要求企業在發生泄露時遵循某些相關規定來向個人和監管機構發出通知。有關 Shofy 針對 GDPR 所做的詳細信息，請查看  的 GDPR 白皮書。

為 GDPR 所做的大部分準備工作都適用于 CCPA，但遵守 GDPR 并不等同于遵守 CCPA。GDPR 適用于歐洲居民，而 CCPA 適用于加州居民。GDPR 適用于數據主體的個人數據，而 CCPA 適用于消費者和家庭的個人信息。GDPR 規定了對跨境轉移數據的要求，而 CCPA 對數據銷售設定了限制。此外，GDPR 和 CCPA 還有不同的數據泄露通知要求和不同的處罰。

有關詳細信息，請下載 Shopify 的 CCPA 白皮書（英文版）。

Comparing the CCPA and GDPR

The CCPA is similar to the European Union’s General Data Protection Regulation (GDPR), which came into effect in May 2018, in that they both give rights to consumers over their data and define responsibilities. However, the GDPR imposes additional obligations, such as the requirement to ensure that personal data is protected as it crosses borders, and requiring businesses to follow certain rules regarding notice to individuals and regulators when a data breach occurs. You can find more information of what Shopify did to prepare for the GDPR in Shopify’s GDPR whitepaper.

Much of the work to prepare for the GDPR applies to the CCPA, but complying with the GDPR doesn't mean that you comply with the CCPA. The GDPR applies to European residents, but the CCPA applies to California residents. The GDPR applies to personal data of data subjects, but the CCPA applies to personal information of consumers and households. The GDPR places requirements on transferring data across borders, but the CCPA places restrictions on the sale of data. Additionally, the GDPR and CCPA have different breach notification requirements and penalties for non-compliance.

For more information, download Shopify's CCPA whitepaper (in English).

特別聲明：以上文章內容僅代表作者本人觀點，不代表ESG跨境電商觀點或立場。如有關于作品內容、版權或其它問題請于作品發表后的30日內與ESG跨境電商聯系。