Who does the CPRA apply to?

The CPRA applies only to for-profit businesses that operate in California and offer products/services to California residents. Businesses must meet at least one of the following thresholds:

  • Annual gross revenue of $25 million or more
  • At least 50% of annual revenue selling or sharing personal information
  • Buy, sell, or share the personal information of at least 100,000 California residents with third parties