Generate your Privacy Policy for free, Get started now →
A business must clear $26,625,000 in annual gross revenue, or buy, sell, or share the personal information of 100,000 or more California consumers, or earn half its revenue from selling personal information, before the CCPA applies. Here are the exact 2026 thresholds and the impact data behind them.
Read article
CPRA doubled the CCPA's data-volume compliance threshold from 50,000 to 100,000 California consumers or households, effective January 1, 2023, one of at least six substantive changes the amendment made to the original 2018 law. See every CCPA-to-CPRA difference: new rights, enforcement body, cure period, and statutory damages, with the 2026 compliance data behind each one.
Read article
General Motors' $12.75 million CCPA settlement, announced in May 2026 by the California Attorney General and the California Privacy Protection Agency, is the largest of 13 confirmed cases. See every CCPA settlement ranked from GM's record fine down to Todd Snyder's $345,178 case, and how the top spot has changed hands three times since 2022.
Read article
The average CCPA settlement is $1.91 million across all 13 confirmed cases publicly disclosed by California regulators since 2022, per PrivacyTerms.io's compilation of California Attorney General and California Privacy Protection Agency enforcement actions through May 2026. See why the median case pays far less.
Read article
California regulators have brought 13 confirmed CCPA enforcement settlements since Sephora's first case in August 2022, per PrivacyTerms.io's chronological review of California Attorney General and California Privacy Protection Agency press releases through May 2026. See every case, its amount, and its violation, listed in order.
Read article
GDPR fines have reached roughly EUR 7.1 billion since 2018, about 285 times CCPA's $24.9 million since 2022, per DLA Piper's January 2026 survey and PrivacyTerms.io's CCPA settlement tracking. See the full scope, consent, and penalty differences in one 2026 table.
Read article
The CCPA opt-out link isn't required on every website. Here's exactly what triggers the requirement, what changed under the CPRA, and where the link has to go.
Read article
California regulators have collected roughly 24.9 million dollars across 13 confirmed CCPA settlements since 2022, led by a record 12.75 million dollar General Motors penalty in May 2026. See the year-by-year trend, the biggest fines, and the violations that trigger enforcement most often.
Read article
Twenty US states now have a comprehensive consumer privacy law in effect as of January 2026, per the IAPP's US State Privacy Legislation Tracker, with four more enacted and awaiting effective dates. See the full state-by-state list, effective dates, and what each law requires.
Read article