Oregon's Consumer Privacy Act (OCPA) is one of the most comprehensive state privacy laws in the nation, giving residents powerful tools to control their personal data. Whether you're dealing with people-search sites, marketing data brokers, or background check companies, here's how to exercise your opt-out rights as an Oregon resident.
What the Oregon Consumer Privacy Act Gives You
The OCPA, which took effect on July 1, 2024, applies to businesses — including nonprofits — that process the personal data of Oregon residents. It grants you several important rights:
- Right to know: Confirm whether a business is processing your data and access a copy
- Right to correct: Fix inaccurate personal information
- Right to delete: Request deletion of your personal data
- Right to portability: Obtain your data in a usable format
- Right to opt out: Stop the sale of your personal data, targeted advertising, and profiling
New for 2026: Universal Opt-Out Signals Required
As of January 1, 2026, all businesses covered by the OCPA must honor universal opt-out preference signals like Global Privacy Control (GPC). This means you can automatically opt out of data sales and targeted advertising across every website you visit by enabling GPC in your browser.
Oregon's Special Data Broker Requirements
Oregon law places specific obligations on data brokers that go beyond what many other states require. Data brokers operating in Oregon must:
- Identify the specific data activities you can opt out of
- Detail which segments of your personal data you can choose not to disclose
- Provide a clear explanation of how to opt out of collection, sale, or licensing of your data
- Describe the process for authorizing someone else to opt out on your behalf
This means data brokers can't hide behind vague privacy policies — they must tell you exactly what they're doing with your data and how to stop them.
Important Restrictions on Data Sales
Recent amendments to the OCPA include two significant bans that directly protect Oregon residents:
- Ban on selling precise geolocation data: No company can sell location data that identifies where you've been to within a certain radius
- Ban on selling children's data: The sale of personal data belonging to anyone under age 16 is prohibited
Step-by-Step: Opting Out of Data Brokers in Oregon
1. Enable Global Privacy Control
Since Oregon now requires businesses to honor GPC signals, your first step is to enable this in your browser:
- Firefox: Settings → Privacy & Security → enable "Tell websites not to sell or share my data"
- Brave: GPC is enabled by default
- Safari: Use the DuckDuckGo extension
- Chrome: Install Privacy Badger or DuckDuckGo Privacy Essentials
2. Search for Yourself on Major Data Brokers
Run your name through these common data broker sites to see what information they hold:
- Spokeo, BeenVerified, WhitePages, TruePeopleSearch
- Intelius, PeopleFinder, PeopleLooker, Radaris
- Acxiom, Epsilon, LexisNexis, Oracle Data Cloud
- PropertyShark, CoreLogic (for property records)
3. Submit Individual Opt-Out Requests
For each broker that has your data:
- Navigate to their opt-out or privacy page
- Submit a data deletion request citing the Oregon Consumer Privacy Act
- Verify your identity as required (usually via email confirmation)
- Document each request with screenshots and dates
Businesses must respond within 45 days of receiving your request. They may extend this by an additional 45 days if necessary, but must notify you of the extension.
4. File a Complaint if Needed
If a data broker fails to honor your request, file a complaint with the Oregon Department of Justice at doj.state.or.us. Attorney General Rayfield has been actively enforcing the OCPA and released a comprehensive one-year report detailing enforcement actions.
Data Brokers Re-List Your Information
Even after successful removal, data brokers frequently re-add your information from public records, social media, and other sources. Oregon's opt-out provisions don't prevent re-collection — only the current use of your data. Ongoing monitoring is essential.
Automate Your Oregon Data Removal With PrivacyOn
With 100+ data broker sites to monitor, manual opt-outs can consume dozens of hours — and the process needs to be repeated regularly. PrivacyOn handles this automatically for Oregon residents:
- Continuous scanning and removal from 100+ data broker sites
- 24/7 monitoring so new listings are caught and removed quickly
- Dark web monitoring to detect if your data appears in breaches
- Family plans for up to 5 people starting at just $8.33/month
- Detailed reports showing removal progress across all brokers
Oregon-Specific Considerations
- Oregon property records: County assessor records are publicly available and commonly scraped by data brokers. While you can't seal these records, removing them from third-party sites reduces your exposure
- Oregon voter registration: Voter data is available to political parties and candidates but is restricted from commercial use. Contact the Secretary of State's office to understand your options
- Court records: Oregon eCourt (OECI) records are searchable online. Sensitive information may be eligible for sealing through a court petition
The Bottom Line
Oregon gives its residents strong privacy protections, especially with the 2026 universal opt-out requirement. But the law only works if you exercise your rights. Whether you go the manual route or let PrivacyOn handle the heavy lifting, taking control of your personal data is worth the effort — and in Oregon, the law is on your side.