OCPA · Effective 2024-07-01

Oregon Data Removal Guide (2026)

Oregon's Consumer Privacy Act took effect July 2024, adding Oregon to the group of US states with comprehensive deletion rights. The law is notably inclusive — it covers nonprofit controllers, which many other state laws exempt.

At a glance

Comprehensive state privacy law
Yes — OCPA
Broker response deadline
45 days from verifiable request
Enforcement
Oregon Department of Justice — Consumer Protection
Residents
4.2M (approx.)

Oregon Consumer Privacy Act (OCPA)

OCPA covers controllers processing personal data of 100,000+ Oregonians (or 25,000+ with data-sale thresholds). Unusually, OCPA applies to nonprofit organizations, unlike most peer state laws. Consumers have deletion, access, correction, and opt-out rights. The AG enforces exclusively; no private right of action. The law requires recognition of universal opt-out mechanisms starting January 2026.

Your rights

  • Deletion, access, correction, portability, opt-out
  • Nonprofit coverage (rare among state laws)
  • Universal opt-out recognition (effective 2026)
  • AG exclusive enforcement

Where your data leaks from in Oregon

Data brokers don\u2019t guess your address \u2014 they scrape specific public-record sources. The ones most relevant in Oregon:

  • Oregon eCourt public case search (OJCIN)
  • Multnomah and Washington County property records
  • Oregon DMV records

Ready to remove

Opt out of 200+ brokers for $2

OfflistMe drafts a legally compliant deletion email citing OCPA for every broker. You send from your own inbox. No account, no ID upload.

Start for $2 \u2192

If a broker ignores your request

If a broker does not respond within 45 days, file a complaint with the Oregon Department of Justice — Consumer Protection. The enforcement authority can assess civil penalties and compel compliance.

File a complaint with Oregon Department of Justice — Consumer Protection \u2197

FAQ: Oregon data removal

Does OCPA cover nonprofit data brokers?+

Yes. Unlike most state privacy laws (CCPA, VCDPA, CPA, CTDPA), OCPA applies to qualifying nonprofits. This closes a loophole where nonprofits aggregating consumer data would otherwise be exempt.

Related resources

Other state guides