Skip to content
Cyber Compliance

CCPA / CPRA → DORA crosswalk

A control-by-control mapping between California Consumer Privacy Act (as amended by CPRA) and Digital Operational Resilience Act (EU 2022/2554). 2 mappings.

CCPA / CPRADORARelationshipNotes
§1798.100
Consumers' right to know and notice at collection
Art. 6
ICT risk management framework
RelatedCurated
Governance & security policy
§1798.150
Duty to implement reasonable security
Art. 6
ICT risk management framework
RelatedCurated
Risk assessment & management

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.