The California Consumer Privacy Act (CCPA) applies to businesses that do business in California, even if they are not physically located within the state. Therefore, organizations outside California may still fall under the CCPA’s scope and need to comply with its requirements.