ABA Journal
January 2019
"The California Consumer Privacy Act of 2018 is the strictest consumer data protection law in the country. The law applies to any company that does business in California and has gross revenues above $25 million; annually buys, receives or sells personal information of 50,000 or more consumers, households or devices; or derives 50 percent or more of its annual revenue from selling personal information."
http://www.abajournal.com/magazine/article/gdpr_california_data_privacy_law