What is the Oregon Consumer Privacy Act?

This law requires businesses to limit the collection of personal data, keep anything they collect secure, and give Oregonians rights over their personal and sensitive data. There are six things you can do to take control of your personal data under this law:

Get informed—what information does a business have about you, and where have they shared it?

1. Get a list of places where your information was sold to.
2. Get a copy of the personal and sensitive data any business has about you.
3. Know what personal information has been collected about you.

Take action—how would you like to deal with the information a business has or may collect in the future about you?

4. Tell a business to delete information they have about you.
5. Say no (“opt out”) to a business selling, profiling, and using your personal information for targeted advertising.
6. Edit any information a business may have about you.

Why should I care?

Companies are constantly collecting information about us. They collect, use, buy, and sell all that information–often without our knowledge or permission, and for their own profit.

Your data belongs to you, but not everyone has the ability or knowledge to keep our information to ourselves. The Oregon Consumer Privacy Act is only as strong as we make it—and that means helping people around us so we can all exercise our collective rights under the law.