An e-commerce company operating in Europe is looking to expand its operations to the US. They store and process user data, including payment information. Considering international regulations and standards, which combination would they most likely need to comply with?

  • GDPR and CCPA
  • GDPR and HIPAA
  • GDPR and ISO 27001
  • GDPR and SOC 2
To expand into the US while handling sensitive user data, the company needs to comply with GDPR (General Data Protection Regulation) for EU users and CCPA (California Consumer Privacy Act) for US users. CCPA is a specific regulation governing data privacy in California, which often sets a standard for the US. GDPR remains applicable for EU customers.
Add your answer
Loading...

Leave a comment

Your email address will not be published. Required fields are marked *