Tech Innovations
Synthetic Data Doesn't End Your GDPR and CCPA Obligations — It Changes Where They Apply
Synthetic data generation, while reducing privacy risks, does not eliminate GDPR and CCPA obligations. Compliance duties are triggered during the generation phase when real personal data is used, requiring lawful basis, PIAs, and ongoing due diligence.
Mina Kim·October 25, 2026
