The CCPA/CPRA applies to any business that meets one or more of the following:

  • Has an annual gross revenue of over $25 million
  • Buys, sells, receives or shares for a commercial purpose, the personal information of 50,000 or more residents of the state of California
  • Earns 50% or more of its annual revenue from selling personal information

Note that the business does not need to be located in California for the CCPA/CPRA to apply.