Cpra Calculator

Determine if your business is likely subject to the California Privacy Rights Act (CPRA) based on key thresholds. Fill in your business’s figures below.

Summary Table

Criteria	Your Value	Threshold	Met?

Summary of your inputs against CPRA thresholds.

What is a CPRA Calculator?

A CPRA calculator is a tool designed to help businesses quickly assess whether they are likely subject to the California Privacy Rights Act (CPRA). The CPRA, an expansion of the California Consumer Privacy Act (CCPA), sets specific thresholds related to revenue, data processing volume, and revenue from data selling/sharing. Our CPRA calculator uses these thresholds to provide an initial indication of compliance obligations.

Businesses, especially those handling data of California residents, should use a CPRA calculator as a first step in understanding their potential legal duties under this significant privacy law. It simplifies the initial assessment based on the quantitative criteria defined in the act.

Common misconceptions are that only large tech companies are affected, or that if a business isn’t physically in California, CPRA doesn’t apply. However, the CPRA has extraterritorial reach and can apply to businesses regardless of location if they meet the thresholds and do business in California or with California residents. This CPRA calculator helps clarify applicability based on the defined thresholds.

CPRA Calculator Formula and Mathematical Explanation

The CPRA calculator evaluates three main criteria to determine if a for-profit entity is likely subject to the CPRA. A business falls under CPRA if it meets at least one of the following conditions as of January 1 of the calendar year:

1. Annual Gross Revenue: Had gross annual revenue in excess of $25,000,000 in the preceding calendar year.
   
   Condition 1: `AnnualRevenue > 25,000,000`
2. Volume of Consumers/Households: Alone or in combination, annually buys, sells, or shares the personal information of 100,000 or more California consumers or households.
   
   Condition 2: `ConsumersHouseholds >= 100,000`
3. Revenue from Selling/Sharing: Derives 50% or more of its annual revenue from selling or sharing California consumers’ personal information.
   
   Condition 3: `RevenueFromSellingSharing >= 50`

The CPRA calculator takes your inputs for these three areas and checks if any of these conditions are true. If one or more are true, the business is likely subject to CPRA.

Variables Table

Variable	Meaning	Unit	Typical Range
AnnualRevenue	Gross annual revenue in the preceding calendar year	USD ($)	0 to Billions
ConsumersHouseholds	Number of CA consumers/households whose data is bought, sold, or shared annually	Count	0 to Millions
RevenueFromSellingSharing	Percentage of annual revenue from selling/sharing CA consumers’ data	Percentage (%)	0 to 100

Practical Examples (Real-World Use Cases)

Example 1: E-commerce Business

An online retailer has an annual gross revenue of $30 million. They process data from 80,000 California customers annually, and about 10% of their revenue is from targeted advertising partnerships that could be considered ‘sharing’.

• Annual Revenue: $30,000,000
• Consumers/Households: 80,000
• Revenue from Selling/Sharing: 10%

Using the CPRA calculator: The revenue ($30M) exceeds $25M. Therefore, the business is likely subject to CPRA, even though the other two thresholds are not met.

Example 2: Small App Developer

A mobile app developer has an annual revenue of $5 million. However, their app, which is popular in California, collects and shares data (with user consent for analytics and ads) from 150,000 California users. They derive 60% of their revenue from these data-sharing activities.

• Annual Revenue: $5,000,000
• Consumers/Households: 150,000
• Revenue from Selling/Sharing: 60%

Using the CPRA calculator: Although revenue is below $25M, they meet both the consumer/household threshold (150,000 >= 100,000) and the revenue from selling/sharing threshold (60% >= 50%). The business is likely subject to CPRA.

How to Use This CPRA Calculator

1. Enter Annual Gross Revenue: Input your company’s total gross revenue from the last calendar year in USD.
2. Enter Consumers/Households Count: Provide the number of California consumers or households whose personal information your business buys, sells, or shares annually. Be comprehensive in what constitutes “sharing”.
3. Enter Revenue Percentage: Input the percentage of your annual revenue that comes directly from selling or sharing the personal information of California consumers.
4. Click Calculate: The calculator will process the inputs.
5. Review Results: The primary result will indicate “Likely Subject to CPRA” or “Likely NOT Subject to CPRA”. Intermediate results show which specific thresholds were or were not met. The chart and table provide a visual summary.

If the CPRA calculator indicates you are likely subject, it is crucial to consult with legal counsel specializing in data privacy to understand your specific obligations and next steps for CCPA compliance (and CPRA).

Key Factors That Affect CPRA Applicability

1. Gross Annual Revenue: The $25 million threshold is a clear line. Exceeding this, regardless of other factors, brings you under CPRA scope.
2. Volume of Data Processing: The 100,000 consumer/household threshold focuses on the scale of data handling concerning California residents. Even with lower revenue, high volume triggers CPRA.
3. Business Model and Revenue Sources: If a significant portion (50% or more) of your revenue comes from selling or sharing personal data of Californians, you are likely covered, even if total revenue and volume are below the other thresholds. This targets businesses heavily involved in data brokerage or extensive ad-tech activities.
4. Definition of “Sharing”: CPRA’s definition of “sharing” is broad and includes transferring personal information for cross-context behavioral advertising, whether for monetary or other valuable consideration. How you interpret “sharing” can greatly affect the 100,000 threshold and the 50% revenue threshold.
5. For-Profit Status: The CPRA primarily applies to for-profit entities that collect consumers’ personal information and do business in California. Non-profits are generally exempt, but there are nuances.
6. Geographic Scope of Business: While CPRA is a California law, it applies to businesses that collect data from California residents, regardless of the business’s physical location. If you have California customers or users, you need to assess CPRA applicability using a CPRA calculator or legal advice.
7. Nature of Data Collected: While the thresholds are quantitative, the types of data collected (e.g., sensitive personal information) can impact the scope of obligations *once* CPRA applies. Our CPRA calculator focuses on applicability.

Frequently Asked Questions (FAQ)

1. What is the difference between CCPA and CPRA?

CPRA (California Privacy Rights Act) amends and expands upon the CCPA (California Consumer Privacy Act). It introduces new rights, obligations, and a new enforcement agency. The thresholds assessed by this CPRA calculator are part of the expanded scope. See our guide on CCPA vs CPRA.

2. Does the CPRA calculator give legal advice?

No, this CPRA calculator provides an indication based on the quantitative thresholds. It is not legal advice. Consult a legal professional for guidance on your specific situation and data privacy laws.

3. What if my revenue fluctuates around $25 million?

The threshold is based on the preceding calendar year’s gross revenue. If you were over $25 million in the last calendar year, you likely meet that threshold for the current year. Monitor revenue closely if you are near the threshold.

4. How do I count “consumers or households”?

This refers to the number of unique California residents or households whose data is processed (bought, sold, or shared). It’s an annual figure. You need internal tracking to estimate this. For more on California consumer privacy, see our resources.

5. What constitutes “sharing” under CPRA?

“Sharing” includes disclosing personal information for cross-context behavioral advertising, even without monetary exchange. It’s broader than “selling”.

6. We are a non-profit. Does CPRA apply?

Generally, CPRA applies to for-profit entities. However, if a non-profit is controlled by or shares branding with a for-profit entity subject to CPRA, or if it voluntarily certifies to the California Privacy Protection Agency, it might be covered.

7. What if we meet none of the thresholds?

If our CPRA calculator shows you meet none of the thresholds, you are likely not subject to CPRA based on these criteria *for now*. However, these factors can change, and other data privacy laws might still apply.

8. Does being a “service provider” affect this?

If your company acts solely as a service provider to other businesses, your obligations are different, defined by your contracts. However, the business hiring you would use a CPRA calculator like this to assess their own status.

Related Tools and Internal Resources