Does CCPA apply to my business?

The longer version

The CCPA applies to a for-profit business that collects California residents' personal information, decides why and how it is processed, does business in California and meets at least one of three thresholds: gross annual revenue of $26,625,000 or more in the preceding calendar year; buying, selling or sharing the personal information of 100,000 or more California residents or households; or deriving 50% or more of annual revenue from selling or sharing California residents' personal information. The revenue figure is adjusted for inflation every two years, and the CPPA lists $26,625,000 as effective January 1, 2025.

Advertising and other data-sharing arrangements need review because the legal definitions may differ from everyday use of "sale" or "sharing." The threshold analysis should use the actual data practices and current official guidance.

Other state laws have their own coverage rules. Being outside CCPA does not establish whether another law applies.

Next steps

1. Compare last year's gross revenue with the $26,625,000 threshold.
2. Count the California residents or households whose personal information you buy, sell or share, and check what share of revenue comes from selling or sharing it.
3. Check whether an exemption covers your organization or the data you hold.
4. If the law applies, set up the required notices and rights workflows.

Related guides

• CCPA and CPRA
• State privacy laws