Who must comply with the CCPA?

Any business that collects personal information from California residents and meets one of the criteria below must comply with the CCPA:

1. Your business has at least $25 million in annual revenue
2. Your business possesses the personal data of more than 50,000 consumers, households, or devices
3. Your business earns half or more of its annual revenue by selling personal data

Even businesses not physically based in California must comply with the CCPA if they serve Californian consumers.