Who Needs to Comply with CCPA?

The CCPA defines a “business” as a for-profit entity that collects “consumer” (in this case, California residents') personal data and meets at least one of the following:

1. The business annually buys, receives, sells, or shares the personal information of 50,000 consumers, households, or devices.
2. The business has an annual gross revenue of over $25 million.
3. The business derives 50% or more of its annual revenue from selling consumer personal information.

See Also: 

1. What are the CCPA Regulations?
2. GDPR vs. CCPA

Return to Cybersecurity Frameworks and Standards Glossary