HomeSearch

Lenses
Business lenslens
Certifying body lenslens
End user / data subject lenslens
Front-line staff lenslens
Government lenslens
Human rights / privacy advocate lenslens
Policymaker (Government lens)lens
Regulator / enforcer (Government lens)lens
Africa
Egyptplanned
Ghanaplanned
Kenyaplanned
Moroccoplanned
Nigeriaplanned
Rwandaplanned
South Africaplanned
Asia-Pacific
Australiaplanned
Chinadrafting
Hong Kongplanned
Indiaplanned
Indonesiaplanned
Japanplanned
Malaysiaplanned
New Zealandplanned
Philippinesplanned
Singaporeplanned
South Koreaplanned
Thailandplanned
Vietnamplanned
Europe
European Uniondrafting
Switzerlandplanned
Türkiyeplanned
United Kingdomplanned
Latin America
Argentinaplanned
Brazilplanned
Chileplanned
Colombiaplanned
Peruplanned
Uruguayplanned
Middle East
Bahrainplanned
Israelplanned
Qatarplanned
Saudi Arabiaplanned
United Arab Emiratesplanned
North America
Canadaplanned
Mexicoplanned
United States (federal)drafting
United States
Californiadrafting
Coloradoplanned
Connecticutplanned
Delawareplanned
Floridaplanned
Indianaplanned
Iowaplanned
Kentuckyplanned
Marylandplanned
Minnesotaplanned
Montanaplanned
Nebraskaplanned
New Hampshireplanned
New Jerseyplanned
Ohioplanned
Oregonplanned
Rhode Islandplanned
Tennesseeplanned
Texasplanned
Utahplanned
Virginiaplanned
Menu

Oregon

Coverage plannedAlso: OCPA

VERIFIED 2026-09-24 · REVIEW BY 2026-12-16

Two things keep this entry short of settled. The statutory text was read from a reproduction because the official Oregon Legislature site could not be reached, and the Act arrives in stages: nonprofits came within it on 1 July 2025, and from 1 January 2026 the Attorney General's duty to give notice and a chance to cure ended, selling precise geolocation became unlawful, and selling or profiling on the data of under-16s was barred.

Instruments

No instrument recorded for Oregon yet.

Regulator

Exercisable rights

Access, deletion, correction, portability and opt-out, plus a list of the specific third parties that received your data or, at the controller's option, personal data generally

Through each lens

End user / data subject

What can I actually do about this today, and what does it cost me.

No end user / data subject analysis for Oregon yet.

Business

What does this obligate us to build, and by when.

No business analysis for Oregon yet.

Government

Government is one lens carrying two sub-lenses, each with judicial reviewability analysis.

No government analysis for Oregon yet.

Policymaker

What did the drafters intend, and what did the text achieve.

No policymaker analysis for Oregon yet.

Regulator / enforcer

What can this authority make stick on appeal.

No regulator / enforcer analysis for Oregon yet.

Certifying body

What is the scope of what we are attesting to.

No certifying body analysis for Oregon yet.

Front-line staff

What do I do when this lands on my desk.

No front-line staff analysis for Oregon yet.

Human rights / privacy advocate

Who does this regime fail, and can that be shown.

No human rights / privacy advocate analysis for Oregon yet.

Sources

  1. ORS 646A.574, text as reproduced by OregonLaws (official oregonlegislature.gov unreachable), (1)(a)-(d) · retrieved 2026-09-17 · https://oregon.public.law/statutes/ors_646a.574
  2. Oregon Department of Justice, privacy law FAQs, consumer rights; effective 1 July 2024; nonprofits 1 July 2025; the 1 January 2026 changes; Attorney General sole enforcement · retrieved 2026-09-24 · https://www.doj.state.or.us/consumer-protection/for-businesses/privacy-law-faqs-for-businesses/