Business (CCPA Definition)

Under CCPA and CPRA, a for-profit legal entity doing business in California that collects consumers' personal information and satisfies one of three thresholds: annual gross revenues exceeding $25 million, annually buying, selling, or sharing personal information of 100,000 or more California residents or households, or deriving 50% or more of annual revenue from selling or sharing consumers' personal information. This definition determines which organizations must comply with CCPA. The law also covers entities that control or are controlled by a business and share common branding. Nonprofit organizations are explicitly excluded. The thresholds mean CCPA primarily affects larger operations, but even smaller businesses can trigger requirements if they're heavily involved in data monetization. Understanding whether you're a 'business' under CCPA is the first step in compliance—it's not just about being a business in the general sense, but meeting specific statutory criteria.