The CCPA/CPRA applies to any business that meets one or more of the following:
- Has an annual gross revenue of over $25 million
- Buys, sells, receives or shares for a commercial purpose, the personal information of 50,000 or more residents of the state of California
- Earns 50% or more of its annual revenue from selling personal information
Note that the business does not need to be located in California for the CCPA/CPRA to apply.