Lexology January 31, 2024
By now, many of you have likely read the first article in our OCPA Series and determined that your organization is not exempt from the Oregon Consumer Privacy Act (OCPA). The next step for businesses that collect information on Oregon Consumers is to determine whether the volume of data collection meets the minimum threshold requirements for the OCPA to apply to your organization.
To fall under the OCPA’s scope, an entity must control or process, in a calendar year: (1) the personal data of 100,000 or more consumers, other than personal data controlled or processed solely for the purpose of completing a payment transaction, or (2) the personal data of 25,000 or more consumers, while deriving 25 percent or more...
Today's Sponsors
Today's Sponsor