Erasure Rights: Must balance with investigation needs
Portability: May need to provide data in standard format
**CCPA Requirements**:
- Notification within reasonable time
- Specific disclosure requirements
- Consumer rights during investigation
- Potential private right of action
**Other Privacy Laws**:
- **PIPEDA** (Canada): Breach notification requirements
- **Privacy Act** (Australia): Notifiable data breach scheme
- **LGPD** (Brazil): Similar to GDPR with local variations
- **POPIA** (South Africa): Protection of personal information