How The California Consumer Privacy Act Stacks Up Against GDPR