Privacy Law Applicability Checker: GDPR, CCPA and More

Where do you have an office, branch or team that processes personal data? (tick all) European Union / EEA United Kingdom Brazil India Where are the people whose data you collect or target? (tick all) EU / EEA United Kingdom California Brazil India Do you deliberately offer goods or services to people in those places (local language, currency, shipping or marketing)? Yes No, they find us incidentally Do you track or profile their behaviour online (analytics profiles, ad targeting, cookies for personalisation)? Yes No California only: which apply? (tick all that apply) We are a for-profit business that does business in California Annual gross revenue above $26,625,000 (prior calendar year) We buy, sell or share personal information of 100,000+ California consumers or households a year 50% or more of annual revenue comes from selling or sharing personal information

Private by design: your text is processed in this browser tab and is never sent or stored. Results are automated checks to support, not replace, a lawyer's review. Nothing here is legal advice.

Questions

Does GDPR apply to a company outside the EU?

It can. Under Article 3(2) GDPR, a business outside the EU is covered if it offers goods or services to people in the EU or monitors their behaviour in the EU. The UK GDPR has an equivalent rule for the UK.

What are the CCPA thresholds?

A for-profit business that does business in California is covered if it meets any one of: annual gross revenue above the adjusted threshold ($26,625,000 from 1 January 2025); buys, sells or shares the personal information of 100,000 or more California consumers or households; or earns 50% or more of its annual revenue from selling or sharing personal information.

Is this a legal opinion?

No. It is a first-pass screen based on the main territorial and threshold rules. Exemptions, sector rules and local laws can change the answer.