california ccpa
Is it possible to bypass CCPA using EULA
<p>Is it possible to avoid CCPA by using an EULA that explicitly bans users with residence location or relation  to California?
By writing that the app is not intended to target californians and that they are not allowed I am no longer targeting californians nor am I offering services to them which means CCPA should not apply.In case they breach this I should get money from them as the person suffers fines(damages) because of the user so he must pay for it under breach of contract.</p>

<h2>No</h2>
<p>The <a href="https://oag.ca.gov/privacy/ccpa" rel="nofollow noreferrer">law</a> applies to all residents of California dealing with all businesses that meet the criteria.</p>
<p>You cannot contract outside the law so any provision in your EULA that attempted to exclude the law would be void and the existence of such a clause could possibly put you in breech of laws prohibiting misleading and deceptive conduct.</p>
<blockquote>
<p>Businesses cannot make you waive these rights, and any contract provision that says you waive these rights is unenforceable.</p>
</blockquote>
<p>While you could, in theory, refuse to deal with Californians, that faces a number of difficulties:</p>
<ul>
<li>it applies to Californians no matter where they are so geolocation is a bust (without even considering the widespread use of VPNs)</li>
<li>if you ask, and a Californian lies; well, they are in breach of contract but you are in breach of the law. The State of California doesn’t care if they lied when they prosecute you.</li>
<li>people move. I live in Australia, but I could move to California in a month or a year. Then the law applies to me even if I signed up with you today.</li>
<li>even if you can successfully exclude Californians, you are still stuck with pretty much the same obligations under GDPR for any Europeans who sneak in.</li>
</ul>
<p>Frankly, the cost of compliance is likely to be substantially less than the cost of avoiding.</p>
