As point of comparison: CCPA only applies to companies if they have either $25 million in revenue or data on 50,000 users (or derive half their revenue from sal

As point of comparison: CCPA only applies to companies if they have either $25 million in revenue or data on 50,000 users (or derive half their revenue from sale of personal information, regardless of size). And to your point about sensitive data, neither CCPA nor GDPR prevent more specialized laws like HIPAA or GLBA.