Your Organization
CCPA/CPRA: —/30
GDPR: —/30
CCPA/CPRA & GDPR Dual-Framework Gap Assessment
JHarris Advisory LLC | Dual-Framework Assessment Tool
Assessment Information
0 of 15 questions answered
Assessment Questions
Assessment Results
CCPA/CPRA Score
0/30
—
GDPR Score
0/30
—
Gap Breakdown by Framework
CCPA/CPRA Gaps Only
GDPR Gaps Only
Gaps in Both Frameworks
No Gaps (Both Frameworks)
Framework-Only Requirements
GDPR-Only Requirements (No CCPA Equivalent)
Q3 — Legal Basis Documentation: GDPR requires a documented lawful basis for every category of processing. CCPA has no equivalent requirement. Organizations extending from CCPA to GDPR must conduct a full legal basis mapping exercise.Q10 — Cross-Border Transfers: GDPR Chapter V requires a legal transfer mechanism (SCCs, adequacy decision, or EU-US DPF certification) for any transfer of EU personal data to non-adequate countries. CCPA imposes no geographic transfer restrictions.
CCPA-Only Requirements (No GDPR Equivalent)
Q7 — Opt-Out of Sale/Sharing: CCPA requires a "Do Not Sell or Share My Personal Information" mechanism and GPC signal support. GDPR has no direct equivalent — the right to object (Art. 21) is a separate concept and applies in different circumstances.Non-Discrimination (Q7 note): CCPA §1798.125 prohibits discriminatory treatment for exercising privacy rights. GDPR has no explicit equivalent.