|
Right, the CCPA targets large/semi-large scale data processors. That Wikipedia seems to be outdated, because the law text reads: > satisfies one or more of the following thresholds: > (A) Has annual gross revenues in excess of twenty-five million dollars ($25,000,000), as adjusted pursuant to paragraph (5) of subdivision (a) of Section 1798.185. > (B) Alone or in combination, annually buys, receives for the business’s commercial purposes, sells, or shares for commercial purposes, alone or in combination, the personal information of 50,000 or more consumers, households, or devices. > (C) Derives 50 percent or more of its annual revenues from selling consumers’ personal information. This alone is enough to apply to most non-trivial apps/businesses where large-scale data harvesting is a huge problem: > the personal information of 50,000 or more consumers, households, or devices. |