Who Must Comply
Not sure if your business needs to comply with California's CCPA and ADMT regulations? Here's a clear breakdown of who is affected.
CCPA Applies If You Meet Any of These Thresholds
The CCPA applies to for-profit businesses that collect personal information from California residents and meet any one of the following criteria:
- Annual gross revenue exceeding $25 million
- Buy, sell, or share the personal information of 100,000 or more consumers, households, or devices annually
- Derive 50% or more of annual revenue from selling or sharing consumers' personal information
ADMT Rules Apply If You Use Automated Technology
Under the new 2026 ADMT regulations, businesses must also comply if they use any form of automated decision-making technology that affects consumers, including:
- AI or machine learning models for consumer-facing decisions
- Automated ad targeting or behavioral profiling
- Personalized pricing or dynamic offer algorithms
- Automated credit, insurance, or employment screening
- Algorithmic content recommendation systems
Industries Commonly Affected
E-commerce & Retail
Online stores using personalized recommendations, targeted ads, or dynamic pricing
Healthcare
Health tech companies using AI diagnostics or automated patient matching
Education & EdTech
Platforms using algorithmic grading, content personalization, or student profiling
Financial Services
Fintech apps using automated lending, credit scoring, or fraud detection
What If I'm Not Sure?
If your business operates online, collects any data from California residents, and uses any form of personalization or automation, you should strongly consider CCPA and ADMT compliance. The cost of compliance is far less than potential fines of $2,500–$7,500 per violation.
Get Compliant with OptOutWidget
OptOutWidget makes it easy to add both CCPA and ADMT compliance to your website. Our embeddable widget handles consumer opt-out requests, while our dashboard helps you track and manage everything.