Oregon Data Removal Guide (2026)
Oregon's Consumer Privacy Act took effect July 2024 and provides rights for qualifying Oregon consumers, subject to the statute's scope and exemptions. Nonprofit entities became subject to the law in July 2025, while motor-vehicle and universal-opt-out provisions have later effective dates.
Research status: published state guide pending fresh official-source re-verification.
This page is educational orientation, not legal advice. Scope, exemptions, deadlines, penalties, regulator powers and broker routes can change. Verify the current statute and state regulator guidance before relying on a right or deadline.
At a glance
- Comprehensive state privacy law
- Recorded: OCPA
- Broker response deadline
- 45 days in this research snapshot for qualifying requests; extensions and exemptions may apply
- Enforcement
- Oregon Department of Justice. Consumer Protection
Oregon Consumer Privacy Act (OCPA)
OCPA generally covers controllers processing personal data of 100,000+ Oregonians or 25,000+ while deriving at least 25% of annual gross revenue from selling personal data, subject to the statute and exceptions. Motor vehicle manufacturers and affiliates can be covered for covered vehicle-use data without the ordinary consumer-number thresholds, and nonprofit entities became subject to the law on July 1, 2025, subject to exemptions. The law grants deletion, access, correction, portability, and opt-out rights; from January 1, 2026, covered controllers must recognize qualifying universal opt-out mechanisms for applicable sale and targeted-advertising opt-outs. Enforcement is exclusive to the AG without a general private right of action.
Read the full OCPAexplainer →Scope, thresholds, exceptions, cure rules, and enforcement details where documented.
What rights do Oregon residents have?
- →Deletion, access, correction, portability, opt-out
- →Coverage for certain nonprofit controllers, subject to exceptions
- →Universal opt-out recognition for applicable sale and targeted-advertising opt-outs (from January 1, 2026)
- →AG exclusive enforcement
Where does your data leak from in Oregon?
The FTC explains that people-search sites may combine public records, public social profiles, and information from other brokers. The examples below are a research snapshot, not an exhaustive or person-specific source map for Oregon:
- Oregon eCourt public case search (OJCIN)
- Multnomah and Washington County property records
- Oregon DMV records
Generate requests in under 60 seconds
Generate requests for 1009 US/global broker workflows for $9
What if a broker ignores your request?
If a qualifying request does not receive a response within the applicable window, review the current extension and exemption rules, then consider the Oregon Department of Justice. Consumer Protection complaint route. The authority's jurisdiction and available remedies vary.
File a complaint with Oregon Department of Justice. Consumer Protection ↗FAQ: Oregon data removal
Does OCPA cover nonprofit data brokers?+
Certain qualifying nonprofits can fall within OCPA, subject to the statute's definitions and exceptions. Do not assume that every nonprofit or every nonprofit-held record is covered; check the controller, activity, data, and exemption facts.