Your Oregon consumer data rights
In effect
The Oregon Consumer Privacy Act gives Oregon residents rights over the personal data that covered businesses and nonprofits collect about them. It has applied to businesses since July 1, 2024, and to nonprofits since July 1, 2025.
- Who or what it protects
- Oregon residents, in their dealings with businesses and nonprofits in Oregon or directing products or services to Oregonians that process the personal data of 100,000 or more Oregonians, or of 25,000 or more while earning at least 25 percent of their revenue from selling personal data. Since September 2025, motor vehicle manufacturers are covered whatever their size. Banks, credit unions and insurance companies are not covered, nor is government or data about your job.
- What you can do
- You can see the personal data a business has collected about you and get a list of the specific companies that received your data. You can correct it, delete it, and get a copy. You can opt out of the sale of your data, targeted advertising and profiling used for important decisions about you. Since January 1, 2026, businesses must honor universal opt-out signals such as the Global Privacy Control, may not sell any Oregonian's precise location data, and may not sell or use for targeted ads or profiling the data of anyone under 16. Use the method in the company's privacy notice. It must respond within 45 days, which it can extend by 45 days. If it denies your request, you can appeal; it must answer within 45 days and, if it rejects the appeal, tell you how to complain to the Oregon Attorney General. You can also report a suspected violation to the Department of Justice.
- Limits and eligibility
- The Oregon Department of Justice enforces the law; it does not act as your attorney. Data brokers must register with the state, and the registry lists how to ask each one to opt you out.
- Who oversees it
- Oregon Department of Justice
- The law
- Oregon Consumer Privacy Act
Checked against the official sources on October 6, 2026. Links last checked November 1, 2026.