Privacy Risk Assessments Under the CCPA and GDPR: A Practical Guide

California's CCPA risk assessment regulations took effect January 1, 2026, and they impose obligations no other U.S. state requires, including executive attestation under penalty of perjury and proactive filing with CalPrivacy. Emily Jones of Simmons and Simmons provides an EU and UK perspective, and Jennifer L. Sheridan of JL Sheridan Law shares a California view on these developments as they compare CCPA risk assessments with data protection impact assessments under the EU and UK GDPR. They cover the six CCPA triggers, the required assessment workflow, and the key deadlines of December 31, 2027 and April 1, 2028. Through an employee monitoring case study, the speakers show how a single deployment triggers both regimes. They also identify where regulators focus their scrutiny. Attendees will leave with a framework for building one assessment process that meets both the prescriptive CCPA checklist and the broader GDPR risk standard.