Oregon Data Removal Services
Exercise your Oregon Consumer Privacy Act (OCPA) rights. GhostMyData helps Oregon residents remove their personal information from data brokers.
Your OCPA Rights
Oregon Consumer Privacy Act (2024) gives you important rights over your personal data
Right to Access
Access your personal data held by controllers
Right to Delete
Request deletion of personal data
Right to Opt-Out
Opt out of data sales, targeted advertising, and profiling
Right to Correct
Correct inaccurate personal data
Top Data Brokers Targeting Oregon Residents
These data brokers collect and sell information about Oregon residents
BeenVerified
Removal: 24-48 hours
Intelius
Removal: 72 hours
TruePeopleSearch
Removal: 24-72 hours
WhitePages
Removal: 48-72 hours
MyLife
Removal: 7-14 days
PeopleFinder
Removal: 24-48 hours
How GhostMyData Helps Oregon Residents
Automated OCPA Requests
We submit legally compliant OCPA deletion requests to data brokers on your behalf.
45-Day Compliance Tracking
We track the 45-day response deadline and follow up on non-compliant brokers.
Compliance Documentation
Get detailed reports of all removal requests for your records or legal purposes.
Understanding Oregon Privacy Law
Overview
Oregon's Consumer Privacy Act (OCPA), signed by Governor Tina Kotek on July 18, 2023 and effective July 1, 2024, is one of the most expansive state privacy laws in the country. The OCPA breaks from other states in two significant ways: it has no revenue threshold for applicability (most states require $25 million+ in revenue), and it applies to nonprofits — making Oregon one of only two states whose privacy law covers the nonprofit sector. These broad applicability rules mean that Oregon residents are protected from data collection and misuse by a wider range of organizations than consumers in any other state. The law also includes an innovative right for consumers to obtain a list of specific third parties to whom their data has been disclosed.
How the OCPA Works
The OCPA grants Oregon residents rights to access, correct, delete, and port their personal data, plus the right to opt out of targeted advertising, data sales, and profiling. Uniquely, Oregon consumers can also request a list of specific third parties (not just categories) to whom their data was disclosed — giving consumers unprecedented transparency into the data supply chain. The law applies to businesses that control or process data of 100,000+ Oregon consumers, or 25,000+ consumers while deriving 25% or more of revenue from data sales. There is no revenue threshold, meaning even smaller organizations must comply if they meet the consumer count thresholds. Controllers must respond within 45 days, with one 45-day extension. The OCPA requires data protection assessments for high-risk processing, including targeted advertising, data sales, biometric data processing, and profiling that presents risks of unfair treatment or financial harm.
Data Broker Landscape in Oregon
Oregon's 4.2 million residents face data broker challenges shaped by the state's diverse economy and progressive culture. Portland's thriving tech industry (often called the 'Silicon Forest') generates significant professional and employment data that brokers aggregate. The state's outdoor recreation economy, legalized cannabis industry, and extensive public records systems all create data streams that people-search sites exploit. Oregon is also home to a significant homeless population and privacy-conscious communities that are especially vulnerable to data exposure. Major data brokers like Spokeo, PeopleFinder, and BeenVerified maintain detailed Oregon resident profiles that include property records from county assessors, voter registration data, business filings, and professional licenses. Oregon's public records law provides broad access to government documents, which data brokers systematically harvest.
Exercising Your Rights
Oregon residents can exercise their OCPA rights by submitting requests to any covered controller. When requesting information about third-party disclosures, controllers must provide specific entity names — not just vague categories like 'marketing partners.' This transparency right is a powerful tool for understanding exactly who has your data. The OCPA does not require universal opt-out mechanism recognition in its initial form, though Oregon may adopt such requirements through future amendments. GhostMyData helps Oregon residents by scanning across 80+ data brokers for their information and submitting OCPA-compliant deletion requests. Our monitoring service is particularly valuable because Oregon's lack of a revenue threshold means more organizations are processing consumer data — and potentially failing to honor deletion requests — than in other states.
Enforcement & Penalties
The Oregon Attorney General has exclusive enforcement authority under the OCPA, with civil penalties of up to $7,500 per violation. AG Ellen Rosenblum, one of the longest-serving state attorneys general in the country, has been a national leader on consumer privacy issues and co-chaired the National Association of Attorneys General Internet Safety/Cyber Privacy and Security Committee. Oregon's initial 30-day cure period is set to expire on January 1, 2026, after which the AG has full discretion on enforcement. Oregon's AG office has a strong track record of data privacy enforcement under the state's Unlawful Trade Practices Act, including settlements with data brokers and tech companies over unauthorized data collection. The OCPA's broad applicability and Oregon's experienced enforcement apparatus suggest that Oregon will be among the most active states in pursuing privacy violations.
Oregon Privacy FAQ
What is the OCPA?
The Oregon Consumer Privacy Act (OCPA) took effect July 1, 2024. It provides comprehensive privacy rights to Oregon residents and applies to a broad range of businesses.
Who does the OCPA apply to?
The OCPA applies to businesses that control or process data of 100,000+ Oregon consumers, or 25,000+ consumers while deriving 25%+ revenue from data sales. Notably, it does not include a revenue threshold.
What makes Oregon's law unique?
Oregon's OCPA has no revenue threshold, applies to nonprofits, and includes a right to obtain a list of specific third parties to whom data was disclosed.
How long do companies have to respond?
Companies must respond within 45 days, with one 45-day extension.
What penalties exist for violations?
The Oregon Attorney General can impose civil penalties of up to $7,500 per violation.
How does GhostMyData help Oregon residents?
GhostMyData automates OCPA-compliant removal requests to 1,500+ data brokers and provides ongoing monitoring.
Data Removal in Other States
Protect Your Oregon Privacy Rights
Don't let data brokers profit from your personal information. Exercise your OCPA rights with GhostMyData.