Do you have to register?

Do you sell or license personal information about California residents to third parties?

Do those residents have a direct relationship with you, as your own customers or users?

Is the data about individuals, rather than only about companies?

Are you covered by a sector carve-out, such as a consumer reporting agency under FCRA, a financial institution under GLBA, or an entity under HIPAA?

Did you do business in California in the last calendar year?