Your business complies with the General Data Protection Regulation ("GDPR") and/or Turkish Personal Data Protection Law numbered 6698 and its secondary legislation ("PDPL"); but does it comply with the California Consumer Privacy Act ("CCPA"), which took effect on January 1, 2020? If your company needs to comply with the CCPA, some crucial differences should be taken into account in privacy compliance management.

Many businesses are in the process of complying with the GDPR and/or the PDPL; however, some of these businesses might need to comply with the CCPA, as well. When exactly would that be necessary? Compliance with the CCPA might especially be triggered for Turkish businesses providing cross-border services directly to California residents, such as E-commerce, gaming, streaming or payment services. In substance, if a Turkish business is doing business in the State of California and collects the personal information of a person residing in the State of California; it might need to comply with the CCPA, irrespective of the location of its main place of business. While the CCPA is not explicit as to the meaning of "doing business in the State of California", it can be interpreted by a reference to "consumer" and thus, any business collecting and/or selling information of California residents can be considered as "doing business in the State of California". A Turkish business may be subject to the CCPA if it meets any of the following criteria: (i) has annual gross revenue over USD 25,000,000, (ii) annually buys, sells, receives or shares for commercial purposes, the personal information of 50,000 or more consumers, devices or households, or (iii) derives 50 percent or more of their annual revenue from selling consumers' personal information.

Moreover, CCPA, GDPR and PDPL differ in terms of several concepts and scope of application. Therefore, if a Turkish business wishes to comply with the CCPA, it is important to know these differences. Hence, we have prepared the table below to demonstrate some of these differences...