HN2new | past | comments | ask | show | jobs | submitlogin

> [receives] the personal information of 50,000 or more consumers, households, or devices.

That's a trivially small bar to clear in order to be regulated under the CCPA where large-scale data harvesting is the focus.



There is more to that clause:

Alone or in combination, annually buys, receives for the business’s commercial purposes, sells, or shares for commercial purposes, alone or in combination, the personal information of 50,000 or more consumers, households, or devices.

So it only applies if you are buying or selling or sharing PII. Not if you just have 50,000 users/visitors to your website and keep it all private.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: