Six months into Oregon’s Consumer Privacy Act (OCPA), the Attorney General reports strong consumer engagement and business compliance, but highlights issues with unclear privacy notices, hidden opt-out options, and denials of data deletion requests. The DOJ received 110 complaints, mostly about data brokers and tech firms. While most businesses corrected issues after receiving cure notices, stricter enforcement begins in 2026, with nonprofits joining compliance requirements by July 2025.
Key Findings from Oregon’s Consumer Privacy Act Report
Full Fusion