The CCPA applies to any business that meets one or more of the following thresholds: Has annual gross revenues of more than $25 million. Buys or sells, or receives or shares for a commercial purpose, the personal information of 50,000 or more California residents.

Does CCPA apply outside of California?

The CCPA is a comprehensive data privacy law that provides a panoply of new rights to California residents, including those who happen to be temporarily outside California at the time that businesses collect their personal information.

Does CCPA apply to all websites?

It is important to note that CCPA applies to for-profit businesses only; nonprofit and government agencies are exempted. The law also contains sections specific to data brokers – companies that collect and sell PI to third parties. For guidance, the California DOJ maintains a list of all registered brokers.