What businesses must comply with the CCPA?

What are the main CCPA requirements for businesses?

California Privacy Rights Act (CPRA) covers any business matching at least one of three conditions:
– Have $25 million or more in annual revenue
– Possess the personal data of more than 50,000 “consumers, households, or devices”, or
– Earn more than half of its annual revenue selling consumers' personal data.

The main CCPA requirements for businesses are:
– Disclose collection.
– Provide the right of deletion.
– Give consumers the opportunity to exercise their rights.
– Have a CCPA-compliant privacy policy.
– Comply with consumer requests.
– Respect consumers’ rights under CCPA.

General Data Protection Regulation (GDPR) applies to all businesses large and small, with few exceptions.
Companies with fewer than 250 employees must keep records of personal data processing activities if it is a regular activity or contains sensitive data.