California Privacy Protection Agency Announces 2025 Increases for CCPA Fines and Penalties

News:

In compliance with the California Consumer Privacy Act (CCPA), every other year the Agency adjusts fines and monetary thresholds in alignment with increases to the Consumer Price Index (CPI). The new amounts go into effect on January 1, 2025.

Beginning in 2025, monetary damages, administrative fines, and civil penalties are being increased for violations of the CCPA. Additionally, the income threshold for businesses and the CPPA board compensation rates have also been adjusted. More information is outlined in the table below:

Updated Monetary Thresholds in CCPA

Civil Code § Updated 2025 Amount Previous Amount
Civil Code § 1798.140(d)(1)(A):
Annual gross revenue amount within the definition of “business”
$26,625,000 $25,000,000
Civil Code § 1798.150(a)(1)(A):
Monetary damages range per consumer per incident
Not less than $107 and not greater than $799 per consumer per incident or actual damages, whichever is greater. Not less than $100 and not greater than $750 per consumer per incident or actual damages, whichever is greater.
Civil Code § 1798.155(a):
Administrative fine amounts
Not more than $2,663 for each violation or $7,988 for each intentional violation and violations involving the personal information of consumers whom the violator has actual knowledge are under 16 years of age. Not more than $2,500 for each violation or $7,500 for each intentional violation and violations involving the personal information of consumers whom the violator has actual knowledge are under 16 years of age.
Civil Code § 1978.199.90(a):
Civil penalty amounts
Not more than $2,663 for each violation or $7,988 for each intentional violation and violations involving the personal information of consumers whom the violator has actual knowledge are under 16 years of age. Not more than $2,500 for each violation or $7,500 for each intentional violation and violations involving the personal information of consumers whom the violator has actual knowledge are under 16 years of age.
Civil Code § 1798.199.25:
Daily compensation rate for Board members
$107 $100

In January of every odd-numbered year, the Agency must make this adjustment to account for changes in the CPI. It is calculated based on the California CPI percentage change published by the Department of Industrial Relations, Office of the Director–Research from August-to-August for the prior two years. The Agency uses the California CPI percentage change from the previous two years' reports and the increase in the thresholds is rounded to the nearest whole dollar.

Visit CPPA’s website and privacy.ca.gov to see materials that have been updated to reflect this change, including on the laws and regulations page and business resources page. All questions regarding the monetary threshold increases may be directed to info@cppa.ca.gov.

About Us

The California Privacy Protection Agency (CPPA) is committed to promoting the education and awareness of consumers’ privacy rights and businesses’ responsibilities under the California Consumer Privacy Act.

Individuals can visit privacy.ca.gov to access helpful and up-to-date information on how to exercise their rights and protect their personal information. In addition, the Agency’s website provides important information about CPPA board meetings, announcements, and the rulemaking process.