CCPA applies to Small-to-Medium-Sized Enterprises, and they face unique challenges.

SMEs surveyed by the IAPP – International Association of Privacy Professionals stated that even if they “do not meet the CCPA’s definition of a ‘business,” their clients and customers will require them to sign contracts attesting to CCPA compliance.

Many have already faced such demands.