Oregon Consumer Privacy Act
In effect since July 1, 2024 (and for nonprofits since July 1, 2025), for businesses that handle data on 100,000 or more Oregon consumers, or on 25,000 or more while earning over 25% of gross revenue from selling it. Most small businesses fall below the thresholds. Your attorney confirms whether it applies to you.