Who Does the CCPA Apply To?

The CCPA applies to companies that:

(1) Operate business online or offline in the state of California AND

(2) Do at least one of the following:

  • Generate a gross revenue of more than $25 million a year

  • Receive or share personal information of more than 50,000 California residents

  • Earn at least half of their annual revenue by selling the personal information of California residents

If your organization meets the criteria above and collects, processes, and/or retains personal information for any California resident—no matter where they are in the country—your organization is subject to the CCPA.

Similarly, if your organization collects, processes, and/or retains information for any individual within the European Economic Area, GDPR addresses the use, protection, and international transfer of personal data.

In order to comply with changing perosnal data regulations, companies need to know what data they have, where it is located and why they have it.

Note: even if you’re not based in California, your firm may be affected if you have customers or employees based there.

The information provided in this resource base and on the Datawallet website does not, and is not intended to, constitute legal advice; instead, all information, content, and materials available on this site are for general informational purposes only. Information on this website may not constitute the most up-to-date legal or other information. This website contains links to other third-party websites. Such links are only for the convenience of the reader, user or browser. No reader, user, or browser of this site should act or refrain from acting on the basis of information on this site without first seeking legal advice from counsel in the relevant jurisdiction. Only your individual attorney can provide assurances that the information contained herein – and your interpretation of it – is applicable or appropriate to your particular situation. All liability with respect to actions taken or not taken based on the contents of this site are hereby expressly disclaimed. The content on this posting is provided “AS IS;” no representations are made that the content is error-free.

Last updated