The CCPA applies to businesses that meet any of the following criteria:
Have annual gross revenues in excess of $25 million Annually buy, receive, sell, or share the personal information of 50,000 or more California residents, households, or devices Derive 50% or more of their annual revenues from selling California residents' personal data