US · complianceSources checked
What makes a company subject to the CCPA?
Under section 1798.140(d) of California's Civil Code, a for-profit entity is a business under the CCPA if it collects consumers' personal information, determines the purposes and means of processing, does business in California, and meets at least one threshold: annual gross revenues over $25,000,000 in the preceding calendar year; annually buying, selling or sharing the personal information of 100,000 or more consumers or households; or deriving 50 percent or more of annual revenues from selling or sharing personal information.
Sources
- California Civil Code, section 1798.140(d) (California Consumer Privacy Act, Definitions)leginfo.legislature.ca.gov (California Legislative Information) · checked 17 August 2026
Related questions
- Does a company have to meet all three thresholds?
- No. Section 1798.140(d)(1) requires the entity to satisfy one or more of the three, alongside the other conditions in the definition.
- Can a parent or sister company be caught too?
- Section 1798.140(d)(2) extends the definition to an entity that controls or is controlled by a business, shares common branding with it, and shares consumers' personal information with it.
What this answer does not cover
- The revenue figure is adjusted under section 1798.199.95, so check the current amount against the source rather than relying on the number here.
- This page covers who counts as a business under the definition. What the CCPA then requires of that business is a separate question.
