Oregon

Question 1

What are consumer rights under Oregon Consumer Privacy Act (SB 619)?

Answer 1

Right to
- KNOW what info has been collected about them
- OBTAIN a list of entities that received their personal info
- ACCESS their personal data
- CORRECT inaccuracies
- DELETE any/all personal data
- opt OUT of use of personal data for targeted advertising /profiling
- opt OUT of sale of personal data

Question 2

What entities/data are exempted from OCPA?

Answer 2

Data covered by HIPAA/GLBA

No broad exemptions for non profits

Question 3

What entities does OCPA apply to?

Answer 3

Businesses that control/process personal data (other than payment processing data)

• at least 100k residents
  OR
• at least 25k residents and obtain 25% of their revenue from the sale of personal data