Agency Funding and Biennial Adjustment of the CCPA’s Monetary Thresholds

What it requires

Subdivision (d) is the adjustment mechanism every dollar figure in the CCPA runs on. On January 1, 2025, and on January 1 of each odd-numbered year after it, the California Privacy Protection Agency must raise five statutory thresholds — the business revenue trigger in § 1798.140(d)(1)(A), the statutory damages band in § 1798.150(a)(1)(A), the administrative fines in § 1798.155(a), the § 1798.199.25 amounts, and the § 1798.199.90(a) civil penalties — by the increase in the California CPI for all urban consumers, measured August to August over the prior two years and rounded to the nearest whole dollar. The Agency must post the adjusted figures by January 15 of the year they take effect, and the adjustment is exempt from Administrative Procedure Act rulemaking. That is why the statute still prints $25,000,000, $2,500 and $7,500 while the amounts actually in force through 2026 are $26,625,000, $2,663 and $7,988. The next adjustment falls on January 1, 2027. Subdivisions (a) through (c) cover the Agency’s own appropriation and staffing.

Legal text (excerpt)

(d)(1) On January 1, 2025, and on January 1 of any odd-numbered year thereafter, the California Privacy Protection Agency shall adjust the monetary thresholds in subparagraph (A) of paragraph (1) of subdivision (d) of Section 1798.140, subparagraph (A) of paragraph (1) of subdivision (a) of Section 1798.150, subdivision (a) of Section 1798.155, Section 1798.199.25, and subdivision (a) of Section 1798.199.90 to reflect any increase in the Consumer Price Index. [...] (3) The agency shall post the adjusted monetary thresholds on its internet website no later than January 15 of the year in which the adjustment becomes effective.

Primary source