Lexology July 11, 2023
On June 22, 2023, Oregon’s state legislature passed the Oregon Consumer Privacy Act (OCPA). Currently, the bill for the OCPA is awaiting signature by the Governor. If it becomes law, most of the Act will go into effect on July 1, 2024, and the remaining sections (discussed below) will go into effect on January 1, 2026.
Who Does the OCPA Apply To?
The OCPA applies to companies that conduct business in Oregon or provide products and services to Oregon residents and companies that annually control or process:
- The personal data (except personal data controlled or processed solely for the completion of a payment transaction) of 100,000 or more consumers; or
- The personal data of 25,000 or more consumers while...