Download Publication
CCPA Addendum - PLA CoC v4.1
Release Date: 07/05/2022
Updated On: 07/16/2025
This document serves as a mapping exercise between the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR) and the CSA Code of Conduct for GDPR Compliance (CoC).
The document includes:
• A mapping between CCPA provisions, GDPR articles and CoC controls;
• A gap analysis comparing the CoC to the CCPA, with the goal of identifying CCPA provisions which may create obligations for cloud service providers adhering to the CoC which are not fully covered by the CoC as of today;
• Compensating controls (i.e., the specific sections of CCPA provisions which are not fully covered by the CoC as of today).
Download this Resource
Prefer to access this resource without an account? Download it now.
Share
Related resources
Related Resources
Are you a research volunteer? Request to have your profile displayed on the website here.
Related Certificates & Training
Learn the core concepts, best practices and recommendation for securing an organization on the cloud regardless of the provider or platform. Covering all 14 domains from the CSA Security Guidance v4, recommendations from ENISA, and the Cloud Controls Matrix, you will come away understanding how to leverage information from CSA's vendor-neutral research to keep data secure on the cloud.
Learn more
Learn more