Oregon requires state agencies to ensure digital accessibility for people with disabilities under state policy and ADA requirements.
Oregon Accessibility & Privacy Laws
Oregon enacted the Oregon Consumer Privacy Act (OCPA) in 2023, becoming one of the growing number of states with comprehensive consumer privacy protections. Effective July 1, 2024, OCPA provides Oregon residents with meaningful control over their personal data. Oregon also maintains accessibility standards for state government websites.
→
Accessibility Standards
State Government Requirements
→
Privacy Law
OCPA - Effective July 2024
Comprehensive consumer privacy law with strong protections including unique nonprofit and data sales provisions.
Oregon Consumer Privacy Act (OCPA)
Oregon's OCPA (SB 619) was signed into law on July 18, 2023, and became effective July 1, 2024. Notable features include coverage of nonprofits (phased in) and a broad definition of "sale" that includes data exchanges for monetary consideration.
Who Must Comply?
Businesses that conduct business in Oregon or target Oregon residents AND meet any of these thresholds:
- Control or process personal data of 100,000+ Oregon consumers (excluding payment transactions), OR
- Control or process personal data of 25,000+ consumers AND derive 25%+ of annual gross revenue from selling personal data
Note: Nonprofit organizations become subject to OCPA on July 1, 2025.
Consumer Rights Under OCPA
| Right | Description |
|---|---|
| Right to Know | Confirm whether data is being processed and access categories and specific pieces of data |
| Right to Correct | Correct inaccuracies in personal data |
| Right to Delete | Delete personal data provided by or obtained about the consumer |
| Right to Portability | Obtain a copy of data in portable, readily usable format |
| Right to Opt Out | Opt out of targeted advertising, sale of personal data, and profiling |
| Right to List of Third Parties | Obtain a list of third parties to whom personal data has been disclosed |
Unique Features of OCPA
- Nonprofit Coverage: Unlike most state privacy laws, OCPA applies to nonprofit organizations (effective July 1, 2025)
- Third Party List: Consumers can request a list of all third parties who received their data
- No Revenue Threshold: Applies regardless of business revenue size if data processing thresholds are met
- Children's Data: Enhanced protections for data of consumers aged 13-15
Sensitive Data
OCPA requires opt-in consent before processing sensitive personal data, including:
- Racial or ethnic origin
- Religious beliefs
- Mental or physical health diagnosis
- Sexual orientation
- Citizenship or immigration status
- Genetic or biometric data
- Personal data from children
- Precise geolocation data
- National origin
- Status as transgender or nonbinary
Oregon State Government Accessibility
Oregon state agencies are required to ensure their websites and digital services are accessible to people with disabilities. The Department of Administrative Services provides guidance on accessibility standards.
Covered Entities
- Oregon state government agencies
- State contractors and vendors
- Public educational institutions
- Local government entities
- State-funded programs
Accessibility Standards
- WCAG 2.1 Level AA compliance recommended
- Section 508 alignment for federally-funded programs
- Alternative formats required upon request
- Accessibility statements encouraged
Enforcement
| Aspect | Details |
|---|---|
| Enforcing Authority | Oregon Attorney General (exclusive enforcement) |
| Cure Period | 30 days to cure violations (expires January 1, 2026) |
| Penalties | Up to $7,500 per violation |
| Private Right of Action | No private right of action |
→
Business Obligations
- Publish clear privacy notice
- Implement data security practices
- Conduct data protection assessments for high-risk processing
- Honor opt-out preference signals
- Limit data collection to what is necessary
- Obtain consent for processing sensitive data
→
Key Agencies
- Oregon Department of Justice
- Oregon Attorney General
- Department of Administrative Services
- Oregon Bureau of Labor and Industries (accessibility complaints)
Related Resources
- US Privacy Laws Overview
- State Privacy Law Comparison
- Business Privacy Obligations
- Consumer Privacy Rights
- ADA Title II Requirements
- All State Laws
- Contact Us
Need Help with Oregon Compliance?
Oregon's OCPA introduces comprehensive privacy requirements with unique features like nonprofit coverage and the right to request third-party lists. Contact our experts for guidance on meeting both accessibility and privacy obligations.