CCPA applies to businesses that trade in the data of more than 50,000 Californians annually, have a revenue of $25+ million, or get over 50% of annual revenue from selling personal information.
This leaves out a lot of small businesses.
How CCPA Defines Data Controllers
How CCPA Defines Data Controllers