Archives

How does the law define personal data?

Posted in on April 11, 2024

Personal data is any information that can be linked to an individual. Personal data also includes any information that can be linked to an individual’s device or a household device (like a cell phone or a smart appliance). Some controller... View Article

What is a “sale” of personal data?

Posted in on

A “sale” is the exchange of personal data for monetary or other valuable consideration between a controller and a third party. ”Valuable consideration” is not limited to money. This could include a controller exchanging customer lists with a third party.... View Article

What does it mean to “process” data?

Posted in on

Processing refers to any action a controller may take with respect to personal data, including collecting, using, storing, selling, sharing, analyzing, or modifying the data.

Does the law apply to vendors and other service providers?

Posted in on

Yes, the law applies to vendors and service providers that maintain or provide services involving personal data on behalf of a controller. The individuals or entities that fit that description are called “processors.”

Who does the privacy law apply to?

Posted in on

The law applies to any individual or entity that conducts business in Oregon or that provides products or services to Oregon residents if, during a calendar year, that individual or entity controls or processes the personal data of: at least... View Article

When does the law take effect?

Posted in on

The law goes into effect on July 1, 2024. For nonprofit entities covered by the privacy law, is not scheduled to go into effect until July 1, 2025.