The CCPA is probably closest to the EU GDPR because it gives consumers expansive rights to know about a company's data processing. Until January 2023, the CCPA excludes most employment information, but after that, these rights will apply to employees, making it closer to the GDPR. While the CCPA and most US privacy laws are quite detailed in what one may/or may not do with data, the GDPR is written along the lines of principles. Which approach (detailed vs. principles) is better for those protected by these rules?

Employees in the USA likely think (as do their employers) that there is very little privacy in the workplace. Those in Europe understandably think differently, given the protections of the GDPR. In managing different rules for personal information, some organizations use the highest (most protective) standard across their countries. In contrast, others limit GDPR-like protections to countries where they are required. What considerations do you think are most important in the decision process for a global company?

Answer rating: 100% (QA)

Answer The choice between detailed vs principlesbased approaches depends ... View the full answer