Costs for the risk assessment (RA) provisions of the CCPA come from California's Standardize Regulatory Impact Assessment (SRIA), linked data below. The low scenario assumes 25% of all businesses comply, the medium scenario assumes 50% comply, and the high scenario assumes 100% comply for 13,082 businesses, 26,163 businesses, and 52,326 businesses, respectively. Subsequent yearly costs are calculated from the average of the first year.