Determine if your company is subject to the the upcoming California Privacy Rights Act (CPRA), or the current California Consumer Privacy Act (CCPA) with these five short questions.
2. Is your business connected to California in any way?
Choose “YES,” if any of the following applies to your business:
4. Is at least 50% of your annual revenue generated by the sale or sharing of California residents’ data?
The CCPA covers businesses that derive at least 50% of revenue from the sale of California residents’ data. The upcoming CPRA expands this threshold to include the sharing of personal data, which includes: sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.
5. Do you have at least 100,000+ consumer or household records from California in your database?
Note: The CCPA applies to businesses that have data from at least 50,000 consumers, households, or devices in their databases. The CPRA updates the threshold to 100,000 or more consumers or households.