DPO SchoolDPO School

Oregon Consumer Privacy Act

Oregon privacy law (OCPA): sensitive data

Law as of October 28, 2026 Reviewed by Sergio Maldonado Elvira on 29 October 2026

Summary (not the statute text)

Sensitive data includes racial or ethnic background, national origin, religious beliefs, health, sexual orientation, transgender or nonbinary status, status as a crime victim, citizenship or immigration status, a child's data, precise geolocation and genetic or biometric data. Processing it requires prior consent, and a known child's data must follow COPPA. Since 1 January 2026 a controller may not sell precise geolocation data or the data of a consumer it knows (or wilfully disregards) is under 16, and may not use such a consumer's data for targeted advertising or significant profiling, even with consent.

Key points

  1. Broad sensitive data list, including transgender or nonbinary status, crime-victim status and national origin.

    Section: ORS 646A.570(18)(a)

  2. Precise geolocation means location within a radius of 1,750 feet.

    Section: ORS 646A.570(18)(a)(C)

  3. Prior consent needed for sensitive data; a known child's (under 13) data must be processed under COPPA.

    Section: ORS 646A.578(2)(b); ORS 646A.570(5)

  4. No targeted advertising or significant profiling of consumers known or wilfully disregarded to be under 16 (from 1 January 2026).

    Section: ORS 646A.578(2)(c)

  5. No sale of personal data of consumers known or wilfully disregarded to be under 16 (from 1 January 2026).

    Section: ORS 646A.578(2)(d)(A)

  6. No sale of precise geolocation data (from 1 January 2026), with carve-outs for communications content and utility metering data.

    Section: ORS 646A.578(2)(d)(B)

  7. Consent cannot be obtained through interfaces that impair choice; inaction is not consent. Revocation must stop processing within 15 days.

    Section: ORS 646A.570(6); ORS 646A.578(1)(d)

Sources

Compare sensitive data across all states

Related, not equivalent: the GDPR and the state laws differ in scope, terms and exceptions.

Law as of October 28, 2026.

Reviewed by Sergio Maldonado Elvira on 29 October 2026. Prepared from the official sources listed.

Official text of the Oregon statute

Reference material, not legal advice.