A business that does not collect personal information from California residents is exempt from the CCPA. Businesses that do collect personal information from California residents are also exempt if they do not meet any of the following thresholds:
- Makes at least $25 million in annual gross revenue.
- Buys, receives, sells, or shares the personal information of 50,000 or more California residents or households.
- Makes at least 50% of its annual revenue from selling consumer data.
