Who is bound by "The Law'? All for-profit companies with annual revenue greater than $10 billion Government entities that collect personal information on private citizens without their permission For-profit companies that conduct business in California and collect data on California residents as long as its annual revenue tops $25 million, or it holds personal information on at least 50,000 consumers, or it generates at least 50% of its annual revenue from selling user data. Both b and c