- 1798.100 – Consumers right to receive information on privacy practices and access information
- 1798.105 – Consumers right to deletion
- 1798.110 – Information required to be provided as part of an access request
- 1798.115 – Consumers right to receive information about onward disclosures
- 1798.120 – Consumer right to prohibit the sale of their information
- 1798.125 – Price discrimination based upon the exercise of the opt-out right
If a company has California employees is it subject to the CCPA?
Not necessarily.
Although the CCPA’s definition of “consumer” includes employees that reside in California,1 the CCPA applies only to a “business” — a term that is defined as being an entity that “does business in the State of California” and that meets one of the following three thresholds:
- Annual gross revenue in excess of $25 million,
- Purchase, receives for commercial purposes, sells, or shares for commercial purposes, personal information of 50,000 or more consumers, or
- Derives 50% of annual revenue from selling consumer personal information.2
The net result is that if a business meets one of the three thresholds established for gross revenue, quantity of data points, or revenue-generated by the sale of personal information, and has California employees, then it will be subject to the CCPA. If a business does not meet one of the three thresholds set forth above, but has California employees, then it will not be subject to the CCPA.