---
title: Who Needs to Comply with CCPA?
description: Click here to learn about CCPA.
---

[Cybersecurity Frameworks and Standards ](https://www.cybersaint.io/cybersecurity-frameworks-and-standards/glossary)

# [Who Needs to Comply with CCPA?](https://www.cybersaint.io/cybersecurity-frameworks-and-standards/glossary/who-needs-to-comply-with-ccpa)

 Written by [David Quaid](https://www.cybersaint.io/cybersecurity-frameworks-and-standards/glossary/author/david-quaid) | Mar 4, 2024 9:36:26 PM

The [CCPA](https://www.cybersaint.io/cybersecurity-frameworks-and-standards/glossary/cybersecurity-frameworks-and-standards/what-is-ccpa) defines a “business” as a for-profit entity that collects “consumer” (in this case, California residents') personal data and meets at least one of the following:

1. The business annually buys, receives, sells, or shares the personal information of 50,000 consumers, households, or devices.
2. The business has an annual gross revenue of over $25 million.
3. The business derives 50% or more of its annual revenue from selling consumer personal information.

See Also: 

1. [What are the CCPA Regulations?](https://www.cybersaint.io/cybersecurity-frameworks-and-standards/glossary/what-are-the-ccpa-regulations)
2. [GDPR vs. CCPA](https://www.cybersaint.io/cybersecurity-frameworks-and-standards/glossary/what-is-gdpr-vs.-ccpa)

[Return to Cybersecurity Frameworks and Standards Glossary](https://www.cybersaint.io/cybersecurity-frameworks-and-standards/glossary)

[View full post](https://www.cybersaint.io/cybersecurity-frameworks-and-standards/glossary/who-needs-to-comply-with-ccpa)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "David Quaid"
  },
  "dateModified" : "2025-05-07T13:25:30.662Z",
  "datePublished" : "2024-03-04T21:36:26Z",
  "headline" : "Who Needs to Comply with CCPA?",
  "image" : {
    "@type" : "ImageObject",
    "height" : 60,
    "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
    "width" : 60
  },
  "mainEntityOfPage" : "https://www.cybersaint.io/cybersecurity-frameworks-and-standards/glossary/who-needs-to-comply-with-ccpa",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Cybersecurity Frameworks and Standards"
  }
}
```