Comprehensive Privacy Law
Oregon Consumer Privacy Act
OCPA
Oregon · Jul 1, 2024
Applies at 100,000+ Oregon consumers, or 25,000+ if you derive revenue from selling personal data (nonprofits get a delayed effective date of Jul 1, 2025 but most are otherwise covered — only insurance-fraud-detection nonprofits and certain noncommercial publisher/broadcaster activity are exempt). Notably, Oregon's HIPAA and GLBA exemptions are data-level only, not entity-level — a departure from most peer states.
Or. Rev. Stat. § 646A.570 et seq.Read statute →
This is a general reference, not legal advice or a determination that this law applies to your specific business. Run the full questionnaire to check against your actual revenue, data volume, and data types.