The CCPA defines a “business” as a for-profit entity that collects “consumer” (in this case, California residents') personal data and meets at least one of the following:
The business annually buys, receives, sells, or shares the personal information of 50,000 or more consumers, households, or devices.
The business has an annual gross revenue of over $25 million.
The business derives 50% or more of its annual revenue from selling consumer personal information.
