California

Action

Laws

Current

Applies to for-profit entities that collect California residents’ personal information (or on behalf of which such information is collected) and that alone or jointly with others determine the purposes and means of the processing of California residents’ personal information, do business in California, and meet one or more of the following thresholds: 

• annual gross revenues greater than $25 million in the preceding calendar year;
• alone or in combination, annually buy, sell, or share personal information of 100,000 or more California residents or households; OR
• derive at least 50% of annual revenue from selling or sharing California residents’ personal information

California Consumer Privacy Act (CCPA)
Date Active: 1/1/2020

Amended by the California Privacy Rights Act (CPRA)
Date Active: 1/1/2023

Regulations promulgated by the California Privacy Protection Agency ("CPPA")

Proposed regulations addressing:
Cybersecurity Audits

Risk Assessments

Automated Decision making Technology