The CCPA - the California Consumer Privacy Act - is a California law. So it only applies in California, right? Actually it’s a little complicated.
The CCPA applies to any for-profit entity (corporation, LLC, partnership, etc.) that:
- Does business in California; and
- Collects, receives or accesses California residents’ personal information; and
- Decides why and how such personal information is used,
AND
Satisfies at least one of the following criteria:
- $ – Has annual gross revenue over $25 million; OR
- Trades or Transfers Data of 50,000 California consumers, households or devices for commercial purposes each year; * meaning buys, shares or sells the personal information
OR
- Derives 50% or more of annual revenue from selling California residents’ personal information
“Consumer,” and “Resident” are defined very broadly in the CCPA - basically, anyone in California who can be identified as a person!
If you do business on the internet, you likely have data from people in California. Long story short: the CCPA applies to most tech and consumer product companies as they grow!