There is tremendous uncertainty in the privacy rights regulatory environment today. The most prominent regulations – GDPR and CCPA – have significant differences. They’re going to continue to change. And new regulations will continue to emerge. Yet with GDPR in full effect, the “wait and see” approach is not an option. What is: a privacy rights management solution that’s future proof against the uncertainty.

In the face of continued consumer distrust over data privacy and a regulatory environment that remains uncertain, forward-thinking companies are building best practices for data stewardship – and creating a competitive advantage in the process.

On May 25th, Apple released a privacy portal to support their obligations under the GDPR. Just a few weeks ago, they released that portal to US users, ostensibly because it was just the right thing to do. Apple makes a point that it does not drive its business with user data, and this move is a direct response to that claim.

The General Data Protection Regulation (GDPR) is one of the most robust individual privacy rights frameworks enacted to date. The regulation contains 99 articles, but it is a handful of those that have upended the traditional privacy paradigm.

If the GDPR does not apply to your company, you can still benefit from implementing a solution for transparency, notice and consent around consumer data handling. A best practices privacy rights management system provides other advantages. For one, it gives you an opportunity to build a competitive advantage as an organization that deserves consumer trust. As another, it puts you a step ahead if (more likely, when) regulations are enacted that do apply to you.

There are many reasons beyond regulatory mandate that companies are choosing to implement solutions for transparency, notice and consent around consumer data handling.

The General Data Protection Regulation (GDPR) is one of the most robust individual privacy rights frameworks enacted to date. The regulation went into effect on May 25, 2018 and covers any organization that deals with the personal data of a European citizen. It not only defines privacy and how to evaluate whether an organization is properly protecting it, but also sets out consequences with substantial financial penalties for non-compliance.

Evolving regulations in privacy and data security are pressuring companies to accommodate user demands for control over their personal information.  The General Data Protection Regulation (GDPR) represents the largest change to European Union (EU) data protection laws in decades, and requires companies that do business in the region to provide increased protections for EU users.

It would be an understatement to say that data privacy regulations made a big impact in 2018 and 2019.

When it comes to privacy regulation enforcement it can be tricky to understand who is leading the charge.  Each regulation handles things individually.  Let's take a look at those who govern two key regulations: the GDPR (General Data Protection Regulation) and the CCPA (California Consumer Privacy Act).