[patja]

But the California law only applies if your business has more than $25m revenue or does a lot of selling of PII. See SEC. 9. Section 1798.140 in the page linked.

[petcat]

> [receives] the personal information of 50,000 or more consumers, households, or devices.

That's a trivially small bar to clear in order to be regulated under the CCPA where large-scale data harvesting is the focus.

[patja]

There is more to that clause:

Alone or in combination, annually buys, receives for the business’s commercial purposes, sells, or shares for commercial purposes, alone or in combination, the personal information of 50,000 or more consumers, households, or devices.

So it only applies if you are buying or selling or sharing PII. Not if you just have 50,000 users/visitors to your website and keep it all private.