Your website must comply with the CCPA if your business meets any one of three tests: annual gross revenue over $26,625,000, you buy/sell/share the personal information of 100,000+ California consumers or households per year, or 50% or more of your annual revenue comes from selling or sharing personal information. If none of these apply to you, CCPA doesn’t cover your site — though you may still need to check other state privacy laws with lower thresholds.
Who Actually Has to Comply With CCPA?
The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), only applies to for-profit businesses that collect personal information from California residents and meet at least one of the following thresholds: