phishing simulations compared to 2018 Brookfield designs its data protocols in compliance with all local and national regulatory requirements, including the European General Data Protection Regulation (GDPR), the California Consumer Protection Act (CCPA), and the Dubai International Financial Centre (DIFC) Data Protection Law, the requirements of which are included in our global data protection policy.