Why do you need to know my company annual gross revenue?

Privacy legislation often includes an annual gross revenue threshold to limit the scope of the law and determine which businesses must comply.

The main reasons for using a revenue threshold (like the AUD $3,000,000 in Australia or the $25 million in the California Consumer Privacy Act) are:

1. Focus on Large-Scale Data Handlers

The revenue threshold is typically used as a proxy for the size and complexity of a business's operations. Larger companies:

• Process vast amounts of data: The assumption is that higher revenue corresponds to a larger customer base and consequently, a larger volume of personal data collected and processed.

• Pose a higher risk: A privacy breach at a major corporation affects significantly more people and can have a greater economic impact.

• Have more resources to invest in the complex technical and legal infrastructure required for compliance.

By setting a threshold, the law focuses its regulatory burden on the largest entities that represent the most significant risk to consumer privacy.

2. Exempting Small Businesses (The Regulatory Burden)

Small and medium-sized enterprises (SMEs) often lack the financial and legal resources to implement the elaborate compliance mechanisms required by comprehensive data privacy laws.

The threshold serves to exempt smaller businesses from the often-onerous compliance requirements, preventing the law from unduly hindering their operations and growth. This ensures the legislation is proportionate—applying primarily to businesses that can reasonably absorb the compliance costs.

3. Fines and Penalties (For other laws)

In some legislation, like the EU's GDPR (General Data Protection Regulation), a company's financial standing, specifically its global annual turnover (revenue), is used to calculate the maximum potential fine.

For a severe violation of GDPR, the fine can be up to 4% of a company's total worldwide annual turnover or €20 million, whichever is higher. This ties the penalty directly to the economic size of the company, ensuring the fine is both:

• Proportionate to the company's financial capability.

• Dissuasive enough to deter large, profitable companies from viewing fines as merely a "cost of doing business."