Cybersecurity Policy Report, Oregon DOJ Publishes FAQs on New Privacy Law, (May 9, 2024)
Organizations Mentioned:Oregon Department of Justice
By Tony Foley
The Oregon Department of Justice (DOJ) has published a series of frequently asked questions outlining the provisions of the Oregon Consumer Privacy Act (OCPA), which takes effect on July 1.
The OCPA (S.B. 619, 82nd Legis. Assemb., Reg. Sess. (Or. 2023)), signed into law in July 2023, gives consumers certain rights related to the processing of their personal data and requires controllers to meet specified obligations concerning the processing of personal information of consumers (CPR, July 19, 2023). The DoJ’s privacy law FAQs page includes separate entries for businesses and consumers.
The business FAQs page includes information on which businesses are subject to the OCPA (including vendors and service providers), the differences between data controllers and data processors, definitions, exclusions, controller responsibilities, and enforcement provisions applicable to violations, among other information.
The consumer FAQs page describes the provisions of the law, outlines the rights it confers on consumers, specifies the types of data protected under the law, and provides information concerning the exercise of consumer rights, including potential recourse for violations by controllers.
News: StateLegislation DataPrivacy