4 ms·
> [receives] the personal information of 50,000 or more consumers, households, or devices. That's a trivially small bar to clear in order to be regulated under
by petcat 9mo ago
> [receives] the personal information of 50,000 or more consumers, households, or devices.
That's a trivially small bar to clear in order to be regulated under the CCPA where large-scale data harvesting is the focus.
- patja 9mo agoThere is more to that clause: Alone or in combination, annually buys, receives for the business’s commercial purposes, sells, or shares for commercial purposes, alone or in combination, the personal information of 50,000 or more consumers, households, or devices. So it only applies if you are buying or selling or sharing PII. Not if you just have 50,000 users/visitors to your website and keep it all private.