Oregon OCPA
Oregon Consumer Privacy Act
Oregon, USA
In force since 2024
United States
Who must comply
Businesses processing data of 100,000+ Oregon consumers, or 25,000+ while deriving 25% of revenue from selling data.
Penalties
Up to $7,500 per violation, enforced by the Oregon Attorney General.
Key obligations
- Honor universal opt-out signals
- Opt-out of targeted ads, sale and profiling
- Opt-in for sensitive data
- Privacy notice
- Consumer rights
How ConsentX helps
Universal opt-out support
Opt-out controls
Sensitive-data opt-in
DSAR and evidence
Get Oregon OCPA ready with ConsentX
This page is a plain-English summary for general information and is not legal advice. Confirm your obligations with qualified local counsel.
How to comply with Oregon OCPA using ConsentX
- 1
Scan your website
Run a free scan to find every cookie and tracker on your site, so you know exactly what needs consent under Oregon OCPA.
- 2
Show a geo-aware consent banner
Add the ConsentX banner. It detects each visitor region and shows the consent experience that Oregon OCPA requires, automatically.
- 3
Block trackers until consent
Keep non-essential cookies and trackers blocked until the visitor agrees, so nothing fires before consent.
- 4
Record tamper-evident proof
Every choice is stored as a tamper-evident consent receipt you can produce in a Oregon OCPA audit.
- 5
Handle data requests on time
Use the built-in DSAR workflow with SLA timers to answer access, deletion and opt-out requests within the legal deadline.
Frequently asked questions
Does Oregon recognize Global Privacy Control?+
Yes, the OCPA requires controllers to honor a universal opt-out mechanism such as GPC.