Not all Shopify merchants and Partners are subject to the CCPA. The CCPA only applies to businesses that collect personal information of California residents, and that meet one of the following conditions:
- Have an annual gross revenue of more than $25 million USD.
- Annually buy, sell, receive for commercial purposes, or share for commercial purposes the personal information of 50,000 or more California consumers, households, or devices.
- Derive 50% or more of their annual revenue from selling California consumers’ personal information.
Businesses are not subject to the law if they do not have a physical presence in California and their commercial conduct takes place wholly outside of California. If you’re using Shopify to power your online store, then this exclusion likely does not apply to you.
Certain requirements, such as the obligation to offer opting out of sale of personal information, apply only if you sell personal information of California consumers. See the Sale of personal information and Opt-out of sale sections for more information.
We can’t give you legal advice about which laws may apply to your business, but we can provide you with some data on how your business uses Shopify so that you can answer this question yourself.
To find data on whether your business meets these thresholds, download Shopify's CCPA whitepaper (in English).