Sort:  

For the moment, and I've answered that to Joe too, the CCPA aims at companies that aren't in the smb area.

From the article:

_"Specifically, CCPA applies to companies that have at least $25 million in revenue and make half their money selling data or gathers information on at least 50,000 consumers."

Cheers!
Lucky