companies that have worked on compliance
with the general data protection
regulation of the European Union are
definitely better prepared to comply
with the California consumer privacy act
in companies who have not I feel sorry
for those of my clients who have a
domestic focus and who were spared by
the GDP are only to now find that they
have this much more rigid prescriptive
and intrusive law to comply with which
may come particularly if we get a right
of private action which much more harsh
enforcement and so I would say to all
the companies that have done a good job
on GDP our compliance you're in good
shape you're in better shape you're
ahead but they still work to be done