CCPA article 9 assessment

Does your business fulfill any of the following: Operate in CaliforniaProcess or sell the personal information of California consumers/householdsFor-profit organization or covered through a qualified affiliate?

YES

No — nonprofit/government entity with no covered affiliation, or no California business nexus

Not sure

Did your business derive 50% or more of its revenue last year from selling or sharing consumers’ personal information?

YES

No

Not sure

Did your business' gross revenue for 2025-2026 exceed $26.625 million?

YES

No

Not sure

Note: CCPA's gross revenue threshold is $26.625 million for 2025 - 2026.

Did you process the personal information of over 250,000 California consumers/households or sensitive information of over 50,000 California consumers/residents last year?

YES

No

Not sure

Note: Employees and business contacts can count, not just consumer/household information. Some HIPAA/CMIA medical information and GLBA-regulated information may be excluded; confirm mixed datasets with counsel.

Do any of the following match your actual/forecasted annual gross revenues?

2026 revenue was/will be over $100M

2027 revenue will be between $50M and $100M

2028 revenue will be less than $50M

None of these/not sure

Does Article 9 of the CCPA apply to you?

Does Article 9 of the CCPA
apply to you?