The California Consumer Privacy Act (CCPA) went into effect on January 2020 with a six-month enforcement grace period. That end date is now here. The CCPA explicitly applies to companies that qualify under one or more of the following statutory criteria:
- Have gross annual revenues in excess of $25 million;
- Possess the personal information of 50,000 or more consumers, households, or devices; or
- Earn more than half of their annual revenue from selling consumers’ personal information
A number of categories of businesses are explicitly exempted from CCPA compliance, including certain industries covered by federal regulations.
Link: CCPA enforcement begins now and most companies aren’t ready