CCPA | Who does it apply to? | Where does it apply?
On January 1, 2020, companies must comply with California's new landmark privacy law, the California Consumer Privacy Act, or CCPA as its widely known.
Who does the CCPA apply to? The CCPA applies to businesses that do business in California, collect or receive personal information from CA residents, and meet one or more of the three threshold requirements:
The first category applies to companies with annual gross revenues of over 25 million dollars. The second category covers companies that annually buy, sell, receive, or share for a commercial purpose the personal information of 50,000 or more consumers, households, or devices. Lastly, the third category includes any company that derives 50% or more of its annual revenues from selling consumers' personal information.
Category two is likely to capture any company that conducts business online or through a mobile application. Take, for example, a company that runs an online blog that receives an average of 150 visitors per day. Over the course of one year, that will add up to more than 50,000 people. If the company's blog is collecting visitor's personal information, such as collecting individuals' IP addresses or browsing history through the use of cookies, then that company will fall within the scope of the CCPA.
Where does the CCPA apply? The CCPA can be enforced against any organization, anywhere. The act does not require organizations to have a physical presence in California. It merely requires that companies do business in the state and meet one of the three threshold requirements.
Have you just started your compliance journey, but find yourself challenged by the fast-approaching deadline? Let our team of privacy professionals help your organization meet its CCPA compliance goals today.
Visit https://www.dpoadviser.com/contact/
Or
Contact [email protected]
www.linkedin.com/in/mike-harrigan-632aa413b