UK GDPR & US Privacy Laws (CCPA/CPRA)

Outside the EU, the two most referenced data-protection frameworks in English-speaking markets are the UK GDPR (the UK's retained version of the EU regulation, kept in force after Brexit via the Data Protection Act 2018) and, in the US, state-level laws such as the California Consumer Privacy Act (CCPA) and its successor the CPRA, since the US has no single federal privacy law. Example: a giveaway organizer targeting UK entrants must comply with the UK GDPR much like the EU version, while one targeting California residents must instead follow CCPA/CPRA rules on disclosure and opt-out rights. Not to be confused with the EU's GDPR itself: that regulation only applies directly within the EU/EEA, while the UK and US each enforce their own separate, broadly similar but legally distinct frameworks.