Oregon CPA — Consumer Privacy & AI Profiling
Oregon's Consumer Privacy Act requires data protection assessments for profiling that presents risk of harm to consumers. If your business processes personal data from Oregon residents, this package covers the assessment and privacy notice requirements.
Penalties for Non-Compliance
Oregon Attorney General enforcement (§ 646A.589). No private right of action. 30-day cure period until January 1, 2026 (§ 646A.589(2)); AG has enforcement discretion after that date. Civil penalties up to $7,500 per violation under UTPA (ORS § 646A.589).
Maximum: Up to $7,500 per violation (UTPA, ORS § 646A.589)
Who Must Comply
Persons doing business in OR or targeting OR residents that (1) process personal data of 100,000+ consumers/year OR (2) derive 25%+ revenue from data sales and process data of 25,000+ consumers.
What's Included (6 Documents)
Privacy Notice Template
Data Protection Assessment
A documented evaluation weighing the benefits of your data processing against the risks to consumers. Required by most state privacy laws.
Consumer Rights Request Procedures
Profiling Opt-Out Documentation
Data Processing Agreement Template
Compliance Checklist
Every step you need to take, in order, so nothing gets missed.
All documents include electronic signature blocks compliant with the ESIGN Act (15 U.S.C. § 7001) and UETA.
What Happens After You Purchase
Your documents generate instantly as fillable PDFs, packaged in a single zip file.
Download directly to your device or email to up to 3 team members.
Fill in the highlighted form fields with your company-specific information. Each document includes clear instructions.
Sign using the electronic signature blocks — ESIGN Act compliant, no printing required.
Have your legal team review the completed documents before deployment.
Statutory Authority
Citation: ORS §§ 646A.570–646A.589
View official source(opens in new tab)Complete Package
$249
One-time purchase. Instant download.
- 6 customized documents
- Instant digital download
- Based on ORS §§ 646A.570–646A.589
- Secure checkout via Stripe
vs. $5,000–$25,000 at a law firm
Verified against enacted statute text
Source: ORS §§ 646A.570–646A.589Questions before purchasing? Email us
Step 1 of 5
Company Information
You May Also Need
Strengthen your compliance program with related documentation.
NYC Local Law 144
If you hire in New York City and use any automated tool to screen or evaluate candidates, you need a...
Texas TDPSA
The Texas Data Privacy and Security Act requires data protection assessments for targeted advertisin...
Delaware PDPA
Delaware has the lowest applicability threshold of any state privacy law — just 35,000 consumers. If...