CPRA Calculator
CPRA Applicability Calculator
Determine if your business is likely subject to the California Privacy Rights Act (CPRA) based on the key thresholds.
Revenue Threshold Met (> $25M): N/A
Consumer/Household Threshold Met (>= 100,000): N/A
Selling/Sharing Revenue Threshold Met (>= 50%): N/A
- Gross annual revenue > $25,000,000, OR
- Buys, sells, or shares personal info of >= 100,000 CA consumers/households, OR
- Derives >= 50% of annual revenue from selling/sharing CA consumers’ personal info.
This calculator provides an initial assessment and is not legal advice.
What is the CPRA Calculator?
The CPRA Calculator is a tool designed to help businesses determine if they are likely subject to the California Privacy Rights Act (CPRA). The CPRA, which amended and expanded the California Consumer Privacy Act (CCPA), sets out privacy rights for California consumers and imposes obligations on businesses that collect their personal information. Our CPRA Calculator uses the key thresholds defined in the act to provide a preliminary assessment.
Businesses that are for-profit and collect personal information from California residents should use this CPRA Calculator if they are unsure about their obligations. The CPRA applies if a business meets one or more of the following criteria: gross annual revenue exceeding $25 million, buying/selling/sharing personal information of 100,000 or more California consumers or households, or deriving 50% or more of annual revenue from selling or sharing California consumers’ personal information.
Common misconceptions include believing the CPRA only applies to businesses located in California (it applies to those doing business *with* Californians) or that only large corporations are affected (the thresholds can catch smaller businesses with significant data activities).
CPRA Calculator Formula and Mathematical Explanation
The CPRA Calculator determines applicability based on three distinct thresholds. A business is subject to CPRA if it meets at least one of these conditions:
- Gross Annual Revenue Threshold: The business had a gross annual revenue exceeding $25 million in the preceding calendar year.
Formula: `GrossAnnualRevenue > 25,000,000` - Consumer/Household Data Volume Threshold: The business annually buys, sells, or shares the personal information of 100,000 or more California consumers or households.
Formula: `ConsumersHouseholds >= 100,000` - Revenue from Selling/Sharing Data Threshold: The business derives 50% or more of its annual revenue from selling or sharing California consumers’ personal information.
Formula: `RevenueFromSellingSharing >= 50`
The CPRA Calculator evaluates these conditions based on your input.
| Variable | Meaning | Unit | Typical Range |
|---|---|---|---|
| Gross Annual Revenue | Total gross revenue in the preceding calendar year | USD ($) | 0 to billions |
| Consumers/Households | Number of CA consumers/households whose data is bought, sold, or shared annually | Count | 0 to millions |
| Revenue from Selling/Sharing | Percentage of revenue from selling/sharing CA data | Percent (%) | 0 to 100 |
Practical Examples (Real-World Use Cases)
Let’s see how the CPRA Calculator works with some examples:
Example 1: Large E-commerce Retailer
- Gross Annual Revenue: $50,000,000
- CA Consumers/Households Data Processed: 150,000
- % Revenue from Selling/Sharing: 5%
The CPRA Calculator would indicate “Likely Subject to CPRA” because the revenue ($50M > $25M) and consumer count (150,000 >= 100,000) thresholds are met, even though the selling/sharing percentage is low.
Example 2: Small Niche Blog with Ad Revenue
- Gross Annual Revenue: $500,000
- CA Consumers/Households Data Processed: 20,000
- % Revenue from Selling/Sharing (via ad partners): 10%
The CPRA Calculator would indicate “Likely NOT Subject to CPRA” because none of the thresholds are met ($500k < $25M, 20,000 < 100,000, 10% < 50%). However, they should still monitor their data practices.
Example 3: Data Broker
- Gross Annual Revenue: $5,000,000
- CA Consumers/Households Data Processed: 500,000
- % Revenue from Selling/Sharing: 80%
The CPRA Calculator would indicate “Likely Subject to CPRA” because although revenue is below $25M, the number of consumers (500,000 >= 100,000) and the percentage of revenue from selling/sharing (80% >= 50%) meet the thresholds.
How to Use This CPRA Calculator
- Enter Gross Annual Revenue: Input your business’s total gross revenue from the last full calendar year.
- Enter Consumer/Household Count: Provide the number of California consumers or households whose personal information your business annually buys, sells, or shares.
- Enter Selling/Sharing Revenue Percentage: Input the percentage of your annual revenue derived from selling or sharing the personal information of California consumers.
- View Results: The CPRA Calculator will immediately show whether you are “Likely Subject to CPRA” or “Likely NOT Subject to CPRA,” along with which thresholds were met.
- Check the Chart: The visual chart helps you see how close your values are to the CPRA thresholds.
- Copy Results: Use the “Copy Results” button to save the inputs and outcomes.
The results give a strong indication, but consulting with a legal expert specializing in data privacy is crucial for a definitive answer and to understand your obligations under the California Privacy Rights Act.
Key Factors That Affect CPRA Calculator Results
Several factors influence whether your business falls under CPRA, as reflected by the CPRA Calculator:
- Business Size and Revenue: The $25 million gross annual revenue threshold is a primary factor.
- Volume of Data Processing: The number of California consumers or households whose data is bought, sold, or shared is critical, especially for businesses with large user bases but lower revenue.
- Business Model: Businesses that derive a significant portion of their revenue from selling or sharing personal information (like data brokers or certain ad-tech companies) are more likely to meet the 50% threshold, even with lower overall revenue. Understanding the difference between CCPA vs CPRA is important here, as CPRA added “sharing.”
- Definition of “Selling” and “Sharing”: CPRA has broad definitions. “Sharing” includes transferring personal information to a third party for cross-context behavioral advertising, whether or not for monetary consideration.
- Calendar Year: The revenue threshold is based on the preceding calendar year, requiring annual reassessment.
- Nature of “Personal Information”: A broad range of data is considered personal information, impacting the consumer/household count.
Frequently Asked Questions (FAQ)
- 1. What is “personal information” under CPRA?
- It’s broadly defined and includes identifiers like name, address, email, IP address, browsing history, geolocation data, biometric information, and inferences drawn from any of these to create a profile.
- 2. Does the CPRA apply to businesses outside California?
- Yes, if the business collects personal information from California residents and meets one or more of the thresholds, it applies regardless of the business’s physical location.
- 3. What’s the difference between “selling” and “sharing” under CPRA?
- “Selling” is disclosing personal information to a third party for monetary or other valuable consideration. “Sharing” is disclosing it for cross-context behavioral advertising, even without direct payment.
- 4. Is the CPRA Calculator legal advice?
- No, this CPRA Calculator is for informational purposes only and does not constitute legal advice. Consult with a qualified legal professional for advice specific to your situation.
- 5. What if my revenue is close to $25 million?
- If you are close to any threshold, it’s wise to act as if you are subject to CPRA or seek legal counsel to be sure, as year-to-year fluctuations can change your status.
- 6. Does the 100,000 threshold count unique individuals or total records?
- It refers to 100,000 or more unique California consumers or households.
- 7. Are non-profit organizations subject to CPRA?
- Generally, CPRA applies to for-profit entities. However, a non-profit controlled by a for-profit that shares branding and data might be covered. Consult legal advice.
- 8. What should I do if the CPRA Calculator indicates I am likely subject?
- You should review your data privacy practices, update your privacy policy, implement processes to honor consumer rights (like the right to know, delete, correct, and opt-out of sale/sharing), and consider consulting a privacy expert or legal counsel. See our Privacy Policy Generator for help.
Related Tools and Internal Resources
- Privacy Policy Generator: Create a CPRA-compliant privacy policy for your website.
- CCPA vs CPRA Compliance Guide: Understand the differences and requirements of these data privacy laws.
- Data Mapping Tools Review: Find tools to help you understand what data protection measures you need by mapping your data flows.
- Data Breach Response Plan Template: Prepare for potential data breaches with a structured plan.
- Employee Privacy Notice Guide: Learn about privacy notice requirements for employees under CPRA.
- Cookie Consent Banner Implementation: Manage cookie consent in line with privacy regulations.