Posted in on April 11, 2024
The key distinction between a controller and a processor is their decision-making authority over personal data. Under the law, a processor may only process data at the request and under the direction of a controller. The processor is contractually bound... View Article
Posted in on
Yes, the law applies to vendors and service providers that maintain or provide services involving personal data on behalf of a controller. The individuals or entities that fit that description are called “processors.”
Posted in on
The law applies to any individual or entity that conducts business in Oregon or that provides products or services to Oregon residents if, during a calendar year, that individual or entity controls or processes the personal data of: at least... View Article
Posted in on
The law goes into effect on July 1, 2024. For nonprofit entities covered by the privacy law, is not scheduled to go into effect until July 1, 2025.
