The biggest difference between the CPRA and GDPR is the type of consent they enforce. California's law gives consumers the right to opt out, while the European Union's requires businesses to receive clear consent.