Yes, the CCPA applies to businesses outside of California. Regardless of where they operate, the CCPA applies to any business that collects personal information from California residents and meets one of the following criteria:
- Makes at least $25 million in annual revenue
- Possesses or shares the personal data of more than 50,000 consumers, households, or devices
- Earns half or more of its annual revenue by selling personal data
