Skip to content
Jurisdiction ยท 1 regulation

Oregon privacy and AI laws

1 regulation in Oregon that affect companies handling data: Oregon OCPA. Part of US States.

  • AmendedPrivacyChildren

    Effective Jul 1, 2024

Past deadlines

January 20263 deadlines

  1. Sale ban on precise geolocation and under-16 data (HB 2008)

    Selling precise geolocation (1,750-ft radius) and the personal data of consumers the controller knows or willfully disregards are under 16 is prohibited.

    Takes effect9 months agoSource
  2. Universal opt-out signals must be honored

    Controllers must honor opt-out preference signals such as Global Privacy Control.

    Compliance deadline9 months agoSource
  3. Cure period sunsets

    The AG's 30-day notice-and-cure requirement expires; enforcement can proceed without a cure opportunity.

    Enforcement9 months agoSource

July 20251 deadline

  1. OCPA applies to nonprofits

    Nonprofit organizations meeting the thresholds become subject to OCPA.

    Takes effect15 months agoSource

July 20241 deadline

  1. OCPA takes effect for most controllers

    OCPA obligations apply to for-profit controllers meeting the thresholds.

    Takes effect2.2 years agoSource

When the rules change: new data, privacy and AI laws and deadlines, the next morning.