With this pact, the CPPA—still the only state-based standalone data privacy regulatory agency in the U.S.—is positioning itself as a transatlantic thought leader in data protection.