Oregon
Or. Rev. Stat. § 646A.570 et seq. (OCPA)
Applicability
- Consent model: opt_out
- Consumer threshold: 100,000
- Revenue threshold: none stated
Enforcement
- Regulator: Attorney General
- DSAR response window: 45 days
- Cure period: Sunset (expired 2026-01-01)
Global Privacy Control (GPC)
Mandatory to honor as of 2026-01-01.
Recommended CMP for Oregon Compliance
Automate opt-out banners, GPC signals, and regional compliance.
Deploy Oregon Compliant Banner →Affiliate disclosure: this is an affiliate link — we may earn a commission at no cost to you.
The information provided is for educational and comparison purposes only and does not constitute formal legal advice.
Sourced from a secondary legal tracker (not yet independently verified against primary statute text), captured 2026-09-11. Source: https://www.consenteo.com/knowledge-hub/legal/us_state_privacy_law_tracker_2026.