Posted in on April 11, 2024
A business must respond to your rights requests within 45 days of receiving the request. Under certain conditions, the business may have an additional 45 days, but the business must tell you if and why it needs that extra time... View Article
Posted in on
The law requires agents to opt-out in the same manner as consumers. That means agents must use the method a business specifies in its privacy notice.
Posted in on
Any individual can designate an agent to exercise their rights to opt-out of (say “no” to) the sale of their data or use of their personal data for targeted advertising or profiling. You cannot designate an agent to exercise your... View Article
Posted in on
Yes, a parent or legal guardian can exercise the privacy rights of a child under age 13, and a guardian or conservator can exercise the privacy rights of the person under their protection.
Posted in on
Businesses must explain in their privacy notice how you can exercise your privacy rights. The notice must explain how you can request that your data be deleted or corrected, how to request a copy of your data, and how to... View Article
Posted in on
Most businesses post their privacy notice on their websites. A link can usually be found at the bottom of the homepage and other webpages. The link’s title may include the word “Privacy” or “Privacy Rights.” For mobile apps, a link... View Article
Posted in on
If a business is covered by Oregon’s privacy law, it must provide consumers with a reasonably accessible privacy notice that explains how you can contact the business to request confirmation about whether the business collects, uses, or stores your personal... View Article
Posted in on
In addition to the rights that apply to all personal data and the special protections for data of children under 13, the law has special requirements for personal data of teenagers who are between 13 and 16 years old. Businesses... View Article
Posted in on
Yes. Before collecting, using, or otherwise processing personal data about someone the business knows is under 13 years old, the business must get consent from that child’s parent or legal guardian.
Posted in on
Sensitive data includes: Any data revealing your racial or ethnic background, national origin, religious beliefs, mental or physical health conditions or diagnoses, sexual orientation, citizenship or immigration status, status as transgender or nonbinary, or status as a crime victim; Genetic... View Article
