On December 17, the California Privacy Protection Agency announced increases in fines and penalties under the California Consumer Privacy Act (CCPA), effective January 1, 2025. The agency’s announcement explained the CCPA requires it to adjust the applicable fine amounts and monetary thresholds biennially based on increases to the consumer price index.

The updates included increasing the annual gross revenue threshold constituting a “business” from $25 million to $26.625 million, increasing the maximum monetary damages available per consumer per incident from $750 to $799, raising the maximum administrative fines or civil penalties for each violation from $2,500 to $2,663 for violations involving consumers over 16 years of age, and raising the maximum administrative fines or civil penalties available for each violation from $7,500 to $7,988 for violations involving the personal information of consumers under 16 years of age. Additionally, the announcement provided that the daily compensation rate for board members has increased to $107 per day, up from $100.