Who does the CPRA apply to?

The CPRA applies only to for-profit businesses that operate in California and offer products/services to California residents. Businesses must meet at least one of the following thresholds:

• Annual gross revenue of $25 million or more
• At least 50% of annual revenue selling or sharing personal information
• Buy, sell, or share the personal information of at least 100,000 California residents with third parties