Who does the CPRA apply to?
The CPRA applies only to for-profit businesses that operate in California and offer products/services to California residents. Businesses must meet at least one of the following thresholds:
- Annual gross revenue of $25 million or more
- At least 50% of annual revenue selling or sharing personal information
- Buy, sell, or share the personal information of at least 100,000 California residents with third parties