CCPA/CPRA & GDPR Dual-Framework Gap Assessment | JHarris Advisory
Privacy · Dual-Framework Gap Assessment
CCPA/CPRA & GDPR Gap Assessment
One control set, two regulators. Where do the two frameworks actually diverge for you?
15 questions2 frameworks scored separately10 to 15 minutesCurrent law as of August 2026
Organization: —
CCPA/CPRA: —/26
GDPR: —/30
What you get, and what it costs. Both framework scores, your readiness level on each, and your single highest-priority gap appear immediately, free. Enter your email at the end for the full gap breakdown, the remediation action behind every gap, and a service-matched engagement path.

Fifteen questions, scored separately against CCPA/CPRA and GDPR. The two frameworks overlap more than most people expect, which is the useful part: several gaps close once and satisfy both. Others do not. Two obligations exist only under GDPR, and one exists only under CCPA. This assessment separates them so you are not building twice or, worse, assuming coverage you do not have.

Scoring is asymmetric on purpose. CCPA is scored out of 26 and GDPR out of 30, because two questions (legal basis documentation and cross-border transfers) have no CCPA equivalent and are not counted against your CCPA score.

Yes = in place and documented  ·  Partial = started, informal, or undocumented  ·  No = not in place. Answer on current state, not intent.

Assessment Information

Both selected. You will get two scores and a combined remediation plan showing which fixes satisfy both frameworks at once.
0 of 15 questions answered

Assessment Questions

Answer all 15 questions to score.

Dual-Framework Results

CCPA/CPRA Score

0/26
—

GDPR Score

0/30
—

Where You Stand

Get your full remediation plan

You have both scores and your biggest gap. The full report shows every gap sorted by priority, the specific remediation action behind each one, which fixes close both frameworks at once, and a recommended engagement path.

  • Every gap classified: both frameworks, GDPR only, or CCPA only
  • A specific remediation action for each gap, with effort estimate
  • Unified quick wins: the fixes that satisfy both frameworks in one pass
  • The two GDPR-only and one CCPA-only obligations spelled out
  • Printable plan for your privacy file
JHarris Advisory LLC provides consulting services, not legal services. It is not a law firm, and submitting this form does not create an attorney-client relationship. Your assessment answers stay in your browser; only what you type above is sent. Do not enter personal data of your consumers or data subjects anywhere on this page.
Build this into your privacy program

This assessment shows you where the gaps are. The CCPA/CPRA Compliance Toolkit gives you the notice templates, DSAR workflows, vendor agreement language, and retention schedule templates to start closing them.

Get the CCPA/CPRA Compliance Toolkit → Book a free scoping call →
Educational self-assessment, not legal advice. JHarris Advisory LLC provides consulting services, not legal services; it is not a law firm, and no attorney-client relationship is created. Regulatory citations are current as of August 2026 and include phase-in dates that have not yet arrived; confirm applicability and current status with counsel.
© JHarris Advisory LLC.
Back to Assessments