The CCPA is an American state law that focuses exclusively on protecting the privacy of California residents. The GDPR is a European Union (EU) regulation that protects the personal data of those living in the EU by imposing strict data protection requirements and strict penalties for non-compliance.