Thankfully California was so much smarter with their qualifications than the EU was - it only affects companies with (a) annual gross revenues of $25 million; (b) obtains personal information of 50,000 or more California residents, households or devices annually; or (c) 50 percent or more annual revenue from selling California residents’ personal information. Way easier for small companies like us to deal with.