LexLint

Know the law your code answers to.

Law / United States / Oregon

Oregon Consumer Privacy Act (OCPA), general applicability and controller duties

ORS 646A.570, 646A.578

A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.

What follows is LexLint's own research summary of this law, not legal advice.

In force since 1 July 2024.

A comprehensive regime rule binding private bodies.

As of 27 August 2026.

What it requires

  • Confirm you conduct business in Oregon, or produce a product or service used by Oregon residents, and process or sell personal data before relying on OCPA's scope in compliance planning.
  • Do not sell precise geolocation data or process a known Oregon minor's (under-16) data for targeted advertising, sale, or profiling; both are prohibited outright as of January 1, 2026.
  • Do not rely on the small-controller exemption if you manufacture motor vehicles; that exemption no longer applies to motor-vehicle manufacturers as of January 1, 2026.

What this law does

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.

OCPA governs private-sector processing of Oregon consumers' personal data. Enacted as S.B. 619 (2023 Regular Session), Or. Laws 2023, ch. 369, effective July 1, 2024 for most controllers; nonprofits were exempt from OCPA duties until January 1, 2026.

Two 2025 amendments, both effective January 1, 2026, are already reflected in the current codified text: H.B. 2008 added a precise-geolocation sale ban and a strict under-16 processing prohibition for targeted advertising, sale, and profiling; H.B. 3875 removed motor-vehicle manufacturers from the small-controller exemption.

When LexLint raises it

  • automated_outreach
  • crawls_web
  • deploys_chatbot
  • processes_biometrics
  • processes_voice
  • trains_models

Read the law

official Oregon statute text, ORS 646A.570 to 646A.589, Oregon Revised Statutes

Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.

Back to the example  ·  Lint your app