The General Data Protection Regulation (GDPR) applies in the European Economic Area and is translated into concrete data protection laws by the individual member states. The California Consumer Privacy Act, on the other hand, applies to California. The most important difference lies in the initial requirement: In most cases, the legislature of a GDPR country requires the active consent of users (consent management) to the processing of personal data. The CCPA, on the other hand, prescribes the possibility of rejection (opt-out) .