Frequently asked questions
Who is subject to the CCPA?
The California Consumer Privacy Act (CCPA) applies to any for-profit business that operates in California and meets any of three criteria:
- Has a gross annual revenue of over $25 million
- Receives, buys, or sells the personal data of 50,000+ California residents
- Acquires 50% or more of its total annual revenue from the sale of residents’ personal information
Who is exempt from CCPA?
Businesses that do not meet any of the criteria listed above, along with nonprofit and government agencies, are not subject to California Consumer Privacy Act (CCPA) regulations.
What rights do California residents have under CCPA?
Under the California Consumer Privacy Act (CCPA), residents have multiple rights, including:
- The right to ask businesses to disclose what personal information has been collected about them and what the business will do with that information
- The right to ask businesses to delete or not sell their personal information
- The right to be notified — before or at the point of data collection — of how this data may be used
It’s also worth noting that it’s not possible to waive these rights, and any contract stipulation to this effect is null and void.
What is considered doing business in California?
According to the Government of California, companies are “doing business” in the state if any of the following conditions are met:
- They engage in any transaction for the purpose of financial gain within the state
- They’re organized or commercially located in California.
- Sales within California exceed set amounts.