Posted in on January 2, 2026
Yes. The law requires consent to process data of children under the age of 13. As of January 1, 2026, a controller cannot sell the data of a consumer who is under 16 years of age. Also, a controller cannot... View Article
Posted in on
No. As of January 1, 2026, it is unlawful to sell a consumer’s precise geolocation (past or present location) data. This ban on the sale of location data applies to all consumers regardless of their age. See HB 2008 for... View Article
Posted in on April 16, 2025
The Oregon DOJ has published guidance, cautioning entities on their use of generative AI, specifically in the context of the OCPA. Page four of the document (linked in the press release) starts the OCPA section: DOJ Issues Guidance on AI... View Article
Posted in on
For the most part, yes. Consider how much personal data is used/collected for these mailings. If your nonprofit is unsure about OCPA compliance with passive mailings, consider offering an opt-out (or unsubscribe) option to maintain compliance.
Posted in on
Yes, for certain types of data and under certain circumstances. Consent is required to collect, store, or otherwise process all categories of “sensitive data,” as defined in the law (see above for more detail about this). Since the OCPA is... View Article
