Posted in on May 13, 2025
Most entities have “back end” data about consumers that isn’t part of their online profile/account. Just offering consumers rights relating to their profile is insufficient. Your entity must provide the above rights to all the personal data they have on... View Article
Posted in on June 24, 2024
Privacy notices should be written in clear, straightforward language geared towards consumers. ORS 646A.578(4) describes all topics that should be contained in a controller’s privacy notice. If a controller shares personal data with third parties, the privacy notice must list... View Article
Posted in on April 11, 2024
A consumer can use an agent to exercise “opt-out” rights. A controller must comply with the opt-out request if the controller can verify, with commercially reasonable effort, the identity of the consumer and the authorized agent’s authority to act on... View Article
Posted in on
Controllers will be required to accept opt-out requests through universal opt-out mechanisms starting on January 1, 2026. Prior to January 1, 2026, controllers may, but are not required to, allow consumers to opt-out of personal data processing through a universal... View Article
Posted in on
Controllers must provide information to consumers free of charge for the first request within a twelve-month period. Controllers may charge a reasonable fee to cover administrative costs to comply with a or subsequent requests within a twelve-month period, unless the... View Article
Posted in on
A controller must respond to a consumer’s request no later than 45 days after receipt of the request. Under certain conditions, the controller may extend the response period by 45 days but must tell the consumer that the response will... View Article
Posted in on
Generally, Oregon consumers have the following rights: The right to access personal data that has been collected about them. The right to know a list of the specific third parties that have received their personal data or any personal data... View Article
