4. Privacy by design

An in-depth comparison between ADPPA (American Data Privacy and Protection Act) and the CALIFORNIA PRIVACY LAWS*
*CCPA (California Consumer Privacy Act) and CPRA (California Privacy Rights Act)

Result of comparison ADPPA California Privacy laws CCPA/CPRA
ADPPA provides an higher standard of protection as it establishes a detailed list of privacy by design fulfillments to be implemented, also with particular focus on certain categories (e.g. individuals under age 17).
  • Covered entities are required to implement reasonable administrative, technical, and physical data security practices and procedures against unauthorized access and acquisition of covered data. Also a list of specific data security practices to be implemented as a minimum is provided under ADPPA.
  • As part of the requirements for privacy by design, covered entities must establish policies, practices and procedures to address privacy risks and implement training and safeguards (with particular regard to individuals under age 17).
  • Absence of a specific provision on such principle.