CCPA Applicability Checker
Check whether the California CCPA/CPRA applies to your business based on revenue, the number of consumers and revenue from selling personal information.
Last reviewed by the Radiatus Cloud team
Check whether the California CCPA/CPRA applies to your business.
Going for ISO 27001, SOC 2, HIPAA or GDPR?
Radiatus runs end-to-end compliance & GRC programs.
Check if the CCPA applies to you
The California Consumer Privacy Act, as amended by the CPRA, applies to for-profit businesses that handle California residents personal information and meet any one of three thresholds. This checker tests those thresholds: annual gross revenue over twenty-five million dollars; buying, selling or sharing the personal information of one hundred thousand or more California consumers or households; or deriving fifty percent or more of annual revenue from selling or sharing personal information. Meeting any single threshold brings a business within scope.
A business need not be located in California to be covered; it is the handling of California residents data that matters.
California privacy obligations
Falling within the CCPA brings significant obligations, including honouring consumer rights to know, delete, correct and opt out of the sale or sharing of their data, and providing clear privacy disclosures. Because only one threshold needs to be met, growing revenue, a large user base, or an advertising-driven model can each trigger coverage. Assessing applicability early lets you prepare the required notices and processes.
This tool gives general guidance; the detailed scope, including specific definitions and exemptions, should be confirmed with qualified advice. All processing happens locally in your browser.
Related tools
- SOC 2 Evidence Readiness — Interactive checklist to gauge your SOC 2 evidence readiness.
- Privacy Policy Checker — Check if your policy covers standard requirements (GDPR/CCPA basics).
- Compliance Req Finder — Find which standards (ISO, SOC2, HIPAA) apply to your industry/region.
- Audit Readiness Planner — Plan your compliance audit timeline (SOC2, ISO) backwards from deadline.
Frequently Asked Questions
What are the CCPA thresholds?
Revenue over twenty-five million dollars, handling the data of one hundred thousand or more consumers or households, or half of revenue from selling or sharing personal information.
Do I need to meet all three thresholds?
No. Meeting any single threshold, as a for-profit business handling California residents data, is enough to bring you within scope.
Does my business need to be in California?
No. It is the handling of California residents personal information that matters, not where the business itself is located.
What is the CPRA?
The California Privacy Rights Act amended and strengthened the CCPA, adding rights and the sharing threshold, and is often referred to together with it.
Privacy & Security
Everything runs in your browser; nothing is uploaded.
How to Use
Enter your figures to check the CCPA thresholds.
Disclaimer: This tool is provided "as is" without warranty of any kind. Results are for educational and utility purposes.
Related Tools
SOC 2 Evidence Readiness
ComplianceInteractive checklist to gauge your SOC 2 evidence readiness.
Privacy Policy Checker
ComplianceCheck if your policy covers standard requirements (GDPR/CCPA basics).
Compliance Req Finder
ComplianceFind which standards (ISO, SOC2, HIPAA) apply to your industry/region.