Oregon Consumer Privacy Act

Oregon's comprehensive consumer privacy law gives residents rights to confirm processing, get a list of specific third parties that received their data, access, correct, delete, and port their data, and opt out of targeted advertising, sale, and significant-decision profiling. Controllers must give a privacy notice, minimize data, secure it, get opt-in consent for sensitive data, run data protection assessments, and (since 2026-01-01) honor universal opt-out signals. 2025 amendments bar selling precise geolocation data and data of known under-16 consumers and extend coverage to all vehicle makers.