Test whether a business is in scope under the current California threshold model.
Grounded in the California statute, CPPA regulations, and current California enforcement themes.
Structured answer sets in this page tree.
Cited legal and guidance references.
A defensible California scope memo should show both why the entity is a business and which threshold it meets, with calculations that can be rerun next year.
The main California thresholds are more than 25 million dollars in annual gross revenue, buying, selling, or sharing the personal information of 100,000 or more consumers or households, or deriving 50 percent or more of annual revenue from selling or sharing personal information.
Even when the business is in scope, some data sets or regulated contexts may be exempt. Review exemptions carefully and write down exactly which data and workflows are carved out.
Scope decisions should be updated on a calendar and after trigger events such as acquisitions, new adtech, major volume growth, or entry into sharing relationships.
Assessment Autopilot can take California CCPA Applicability Test from deciding whether these obligations apply in practice to a reusable workflow inside Sorena. Teams working on California CCPA can keep owners, evidence, and next steps aligned without copying this guide into separate documents.
Start from California CCPA Applicability Test and turn the guidance into owned tasks, evidence requests, and review checkpoints.
Review your current process, evidence gaps, and next steps for California CCPA Applicability Test.