Data Privacy · Oregon

Oregon Consumer Privacy Act

SB 619 - enacted in Oregon.

Status
Enacted
Enacted
2023
States with data privacy laws
21
Oregon tracker score
62/100 Top quartile

The bottom line

Oregon Consumer Privacy Act is an enacted law in Oregon, part of a mature, broadly-adopted data privacy landscape.

Enacted
effective 2024-07-01
21
states have data privacy laws
21/21
data privacy laws enacted nationally
62/100
Oregon tracker score

Data compiled 2026-03-18 from the official Oregon legislative record linked below; laws can be amended or repealed after this date.

Category catalog share · regulations

How 21 tracked data privacy records split by state

Exclusive Oregon vs other-state counts in this category (sum to the category total). Orthogonal to the peer scatter below, which plots enacted volume against portal tracker score.

Regulatory Snapshot: Oregon Consumer Privacy Act

Oregon Consumer Privacy Act (SB 619) is an enacted law in Oregon under the Data Privacy category. It was enacted on 2023-07-18 and becomes effective on 2024-07-01. Oregon currently has 8 regulations tracked here, with 8 records marked enacted in this dataset. PlainRegWatch's tracker score is 62/100; it summarizes coverage within the five categories this site tracks and is not an official state rating. PlainRegWatch compiled this entry's data on 2026-03-18; consult the linked official source for the current, authoritative text.

Nationally, 21 data privacy statutes have been enacted and 0 additional bills remain pending - 21 distinct jurisdictions have codified rules in this area so far. That places Oregon within a mature and broadly adopted data privacy landscape where compliance programs typically hinge on definitions in SB 619 itself.

Applicability under Oregon Consumer Privacy Act: 100K+ consumers, or 25K+ with 25%+ data sale revenue. Includes nonprofits. Penalty exposure is documented as: $7,500/violation. AG with 30-day cure (sunsets Jan 2026). Notable exemptions: HIPAA, GLBA, government (nonprofits NOT exempt)..

Summary

Strong law with no revenue thresholds. One of few applying to nonprofits.

Key Requirements

  • Full rights.
  • Universal opt-out.
  • Data protection assessments.
  • Nonprofit coverage.

Penalties

  • $7,500/violation.
  • AG with 30-day cure (sunsets Jan 2026).

Applicability

  • 100K+ consumers, or 25K+ with 25%+ data sale revenue.
  • Includes nonprofits.

Exemptions

  • HIPAA, GLBA, government (nonprofits NOT exempt).

Category context

How Oregon sits among data privacy peers

21 states have a tracked record in data privacy ; Oregon ranks #6 by portal tracker score among those peers. Each point is one state with at least one data privacy regulation in this archive.

Fewer enacted, higher tracker scoreMore enacted, higher tracker scoreFewer enacted, lower tracker scoreMore enacted, lower tracker score0.9 enacted1.0 enacted1 enacted1.0 enacted1.1 enacted27.6/10045.7/10063.8/10081.9/100100/100Enacted laws in this categoryPortal tracker scoreCalifornia, Enacted laws in this category: 1 enacted · Portal tracker score: 100/100Colorado, Enacted laws in this category: 1 enacted · Portal tracker score: 76/100Connecticut, Enacted laws in this category: 1 enacted · Portal tracker score: 62/100Delaware, Enacted laws in this category: 1 enacted · Portal tracker score: 59/100Florida, Enacted laws in this category: 1 enacted · Portal tracker score: 48/100Indiana, Enacted laws in this category: 1 enacted · Portal tracker score: 31/100Iowa, Enacted laws in this category: 1 enacted · Portal tracker score: 31/100Kentucky, Enacted laws in this category: 1 enacted · Portal tracker score: 31/100Maryland, Enacted laws in this category: 1 enacted · Portal tracker score: 48/100Minnesota, Enacted laws in this category: 1 enacted · Portal tracker score: 62/100Montana, Enacted laws in this category: 1 enacted · Portal tracker score: 31/100Nebraska, Enacted laws in this category: 1 enacted · Portal tracker score: 31/100New Hampshire, Enacted laws in this category: 1 enacted · Portal tracker score: 31/100New Jersey, Enacted laws in this category: 1 enacted · Portal tracker score: 48/100Oregon, Enacted laws in this category: 1 enacted · Portal tracker score: 62/100Rhode Island, Enacted laws in this category: 1 enacted · Portal tracker score: 48/100Tennessee, Enacted laws in this category: 1 enacted · Portal tracker score: 31/100Texas, Enacted laws in this category: 1 enacted · Portal tracker score: 69/100Utah, Enacted laws in this category: 1 enacted · Portal tracker score: 55/100Vermont, Enacted laws in this category: 1 enacted · Portal tracker score: 48/100Virginia, Enacted laws in this category: 1 enacted · Portal tracker score: 59/100
Data Privacy peer states: enacted laws in this category versus portal tracker score (0–100)
Read the peer-state figures
  • California: 1 enacted of 1 tracked data privacy record, tracker score 100/100.
  • Colorado: 1 enacted of 1 tracked data privacy record, tracker score 76/100.
  • Texas: 1 enacted of 1 tracked data privacy record, tracker score 69/100.
  • Connecticut: 1 enacted of 1 tracked data privacy record, tracker score 62/100.
  • Minnesota: 1 enacted of 1 tracked data privacy record, tracker score 62/100.
  • Oregon (this state): 1 enacted of 1 tracked data privacy record, tracker score 62/100.
  • Delaware: 1 enacted of 1 tracked data privacy record, tracker score 59/100.
  • Virginia: 1 enacted of 1 tracked data privacy record, tracker score 59/100.
  • Utah: 1 enacted of 1 tracked data privacy record, tracker score 55/100.
  • Florida: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
  • Maryland: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
  • New Jersey: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
  • Rhode Island: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
  • Vermont: 1 enacted of 1 tracked data privacy record, tracker score 48/100.
  • Indiana: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
  • Iowa: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
  • Kentucky: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
  • Montana: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
  • Nebraska: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
  • New Hampshire: 1 enacted of 1 tracked data privacy record, tracker score 31/100.
  • Tennessee: 1 enacted of 1 tracked data privacy record, tracker score 31/100.

Dashed lines mark the peer averages in this category. The tracker score summarizes enacted records across all five policy areas PlainRegWatch tracks; it is not enforcement strength or legal burden. Read how tracker scores are computed.

Tracker-score ranking on data privacy

Top peer states by portal tracker score among jurisdictions with a data privacy record in this archive.

Read with Oregon Consumer Privacy Act

Nearest data privacy volume peers and same-state archive siblings for this ENACTED · MID row.

ENACTED MID

Disclaimer: This summary is provided for informational purposes only and does not constitute legal advice. Regulation details may have changed since this data was compiled (2026-03-18). Always consult official sources and qualified legal counsel for compliance guidance.

More Oregon Regulations

Data sourced from official state legislatures, IAPP, NCSL, and federal regulatory trackers. See our methodology for details. Retrieved and formatted by PlainRegWatch.

Verify with the official Oregon source →

Every figure on PlainRegWatch is rendered from curated state legislative and Federal Register source data, no number is typed in by an editor. Status, dates, and source URL are this record's row in the curated archive, not a live legislature scrape. See our editorial standards & corrections policy, the methodology behind these numbers, or report a data error. Data current as of July 2026. Tracker scores and rule counts are curated records in five tracked categories - not enforcement strength, legal advice, a complete inventory of US law, or a live bill-status feed.