Skip to content
safelaunch
← All markets

US States · 1 law · 7 requirements

Oregon: the laws your website or app must follow

If your customers are in Oregon, these are the privacy, consumer, security, accessibility and AI laws SafeLaunch checks your site against, with what each one requires and where in the law it says so.

How a SafeLaunch audit checks each one
  • CheckedChecked automatically on every scan
  • AI reviewLooked for by the AI analysis, reported only with evidence
  • Your answersDecided from your answers to the audit questions
  • PreparedPrepared for you in the report's compliance pack
  • You confirmA scan can't see this; you need to confirm it

Oregon Consumer Privacy Act

In force since 1 July 2024; universal opt-out signals required from 1 Jan 2026.

Who it covers: Businesses handling data of 100,000+ Oregon residents a year, or 25,000+ while earning 25% of revenue from selling data.

What it requires of a website or app (7)

  • A privacy notice: categories, purposes, rights and how to appeal, data shared and with whomCheckedOCPA ORS 646A.578(4)
  • Rights to access, correct, delete and port data, and to opt out of targeted ads, sale and profiling; appealsCheckedOCPA ORS 646A.574
  • Honour universal opt-out signals such as Global Privacy ControlCheckedOCPA ORS 646A.574 (opt-out preference signals, from 1 Jan 2026)
  • Consent (or where the law allows, notice and an opt-out) before processing sensitive data; children's data handled under COPPAYour answersOCPA ORS 646A.578(2)(b)
  • Reasonable data securityCheckedOCPA ORS 646A.578(1)(c)
  • Data protection assessments for targeted ads, sale, profiling and sensitive dataPreparedOCPA ORS 646A.586
  • On request, name the specific third parties (not just categories) you shared a person's data withAI reviewORS 646A.574(1)(a)(B)

Sources:Oregon DOJ: Consumer Privacy Act

Check your site against Oregon's rules

A free scan checks your website or app against these rules in about a minute and shows what applies, with evidence from your pages. The full report gives the exact fix for each finding.

Check my site free

One free fix in your inbox each week

A new copy-paste prompt for Lovable, Cursor or Claude Code every week, with the rule behind it and how to check it worked, plus the Monday briefing on new laws and deadlines. No spam, unsubscribe in one click.

By signing up you agree to get these weekly emails. We send it with Kit, and you can unsubscribe at any time. What we share with Kit is in our privacy notice.

A plain-language summary of what each law requires of a website or app, from the SafeLaunch rulebook, with the provision and official sources. It is not legal advice and not every duty in each law is listed.