Oregon SB 619 (opt out of profiling; child-data & assessment rules)
Oregon Consumer Privacy Act (SB 619) - Profiling, Children's Data, Assessments
Oregon · Oregon Consumer Privacy Act, 2023 Or. Laws (SB 619), ORS 646A.570-646A.589, eff. July 1, 2024
- Status
- In effect
- Took effect
- July 1, 2024
- Applies to
- Controllers and processors doing business in Oregon that meet the Act's thresholds.
- Enforced by
- Oregon Department of Justice / Attorney General.
Oregon's consumer privacy law lets residents opt out of having their personal data used for profiling that supports decisions with legal or similarly significant effects. It adds stronger protections for data about people the business knows are under 16, and requires businesses to complete and document data protection assessments for processing that poses a heightened risk, including risky profiling. The Attorney General enforces it; there is no private lawsuit right.
Who is protected: Oregon consumers, with added protections for those under 16.
Legal detail
SB 619 enacts the Oregon Consumer Privacy Act, providing an opt-out from profiling in furtherance of decisions with legal or similarly significant effects, heightened protections for consumers under 16, and mandatory data protection assessments for heightened-risk processing.
Key facts
| Jurisdiction | Oregon |
|---|---|
| Level | State |
| Strength | Limited |
| Enacted | July 18, 2023 |
| Citation | Oregon Consumer Privacy Act, 2023 Or. Laws (SB 619), ORS 646A.570-646A.589, eff. July 1, 2024 |
| Private right of action | No, agency enforcement only |
| Penalties | Civil penalties of up to $7,500 per violation; no private right of action. |
| Topics | consumer data privacy · automated decision-making · children's online safety |
| Bill text | Oregon Legislature - Enrolled Senate Bill 619 (2023) |
More AI rules in Oregon
- Oregon SB 1546 (AI companion chatbot disclosure + private right of action) · Enacted (not yet in effect)
- Oregon state-land data center transaction pause (2026) · In effect
- Oregon SB 1516 — ALPR limits and vendor liability (2026) · In effect
- Oregon HB 4084 Data Center Tax Moratorium · In effect
- Oregon POWER Act · In effect
- OR weaponized-drone ban · In effect
Related consumer data privacy rules elsewhere
- Vermont Data Broker Law (H.211) · Enacted (not yet in effect)
- Chatrie v. United States (Fourth Amendment protection for location… · Blocked / in litigation
- House Bill 2512 — Banning surveillance pricing by rideshare companies · Proposed / pending
- Kids Internet and Digital Safety Act (KIDS Act) (H.R. 7757) · Proposed / pending
- Maine LD 61 (employer surveillance disclosure & prohibition) · In effect
- Washington SHB 1672 (employee monitoring notice, ADS restrictions, emotion AI ban) · In effect
See something wrong or out of date? Submit a correction. Every entry must carry a verifiable source.