Privacy Laws Oregon
OR

Oregon Consumer Privacy Act

OCPA

Includes non-profit organizations (unique among state privacy laws). Broad definition of sensitive data including transgender/non-binary status.

Effective Date
2024-07-01
Enforcement
Attorney General
Consumer Threshold
100,000 consumers
Revenue Threshold
No threshold

Key Requirements

Privacy notice with specific disclosures
Right to access, correct, delete personal data
Right to data portability
Right to opt-out of sale, targeted advertising, profiling
Data protection assessments
Consent for sensitive data
Applies to non-profits (unique)
30-day response period for consumer requests

Penalties

Up to $7,500 per violation.

Cure Period

30-day cure period (expires January 2026)

E-commerce Relevance

Applies to nonprofits too. Broad sensitive data definition. Standard thresholds otherwise.

Back to All Privacy Laws Scan Your Site