The law doesn’t apply to every business in California. Effective January 1, 2023, the CPRA applies specifically to for-profit businesses doing business in the state of California that meet one of the following criteria:

  1. Have a gross annual revenue in excess of $25 million;
  2. That buy, sell and/or share (alone or in combination) personal information of 100,000 or more California residents or households; or
  3. That derive 50 percent or more of annual revenue from selling or sharing consumers’ personal information.
  • ​​


    This premium content is for our members. For immediate access, join online or by phone at 800-331-8877. Or Start a Free Trial Now for 7 days.

    Already a Member? Sign In Below.

Sign In
Remember Email