What Businesses Must Comply with the CCPA?

The CCPA applies to for-profit businesses that do business in California and fulfill one or more of the following thresholds:

• Have annual gross revenues of more than $25 million

• Buy, sell, or receive the personal information of 50,000 or more consumers, households, or devices

• Derive 50% or more of their annual revenues from selling personal information

Additionally, any entity that controls or is controlled by a business that meets any of the above requirements must comply with the CCPA if it shares common branding with the for-profit business that it controls or is controlled by.

The business I’m transacting with is located outside of California.
Can I still exercise my CCPA rights with that business?

Whether or not a business has a physical presence within California is not a criteria for CCPA compliance. If the business that you are transacting with meets the criteria mentioned above, then they are obligated to honor your rights as a California consumer.

If you want to exercise the rights provided to you by the CCPA, check the business’s privacy policy or contact them directly.