Oregon Privacy Disclosure

1. Overview of the law

The Oregon Consumer Privacy Act took effect on July 1, 2024. It applies to businesses that process personal data of at least 100,000 Oregon residents, or 25,000 residents when at least a quarter of revenue comes from selling personal data. The law is enforced by the Oregon Attorney General. SIE meets the 100,000 resident threshold and applies the OCPA in full.

2. Your rights

• Right of access. Confirm processing and get a copy of your personal data.
• Right to know third parties. Get a list of specific third parties to whom we have disclosed your personal data.
• Right to correct. Fix inaccurate personal data.
• Right to delete. Have personal data we hold about you erased.
• Right to portability. Receive your data in a usable format.
• Right to opt out. Stop targeted advertising, sale of personal data, and certain profiling.

3. How SIE complies

We honor the Oregon-recognized Universal Opt-Out Mechanism, including Global Privacy Control. We obtain opt-in consent before processing sensitive data, including data revealing race, religion, health, sexual orientation, citizenship status, genetic or biometric data for identification, precise geolocation, and data of a known child under thirteen. Oregon allows you to request a list of the named third parties to whom we have disclosed your data, which we maintain in our compliance dashboard.

4. Authorized agents

Oregon allows authorized agents for opt-out requests. The agent should provide written authorization signed by you. We may verify the request with you directly before acting.

5. How to submit a request

Or email [email protected] with the subject line "Oregon OCPA Request".We respond within forty-five days.

6. Effective date and scope

The OCPA took effect on July 1, 2024 for most controllers, with non-profits gaining coverage in 2025. The law covers Oregon residents acting in a personal or household context.