Oregon Consumer Privacy Act, prohibited sales (under-16 data, precise geolocation) (ORS 646A.578(2)(d) (2025 ed.))
Oregon now bars selling data of known under-16s and precise (1,750 foot) location data at all, so such data must be removed from any licensed set.
Dated 17 Oct 2026Source checked 17 Oct 2026Basis: primary text
In the source's own words
“(d) Sell personal data that: ... (A) Pertains to a consumer if the controller has actual knowledge that, or willfully disregards whether, the consumer is under 16 years of age; or ... (B) Accurately identifies within a radius of 1,750 feet a consumer’s present or past location”
Where it was read
Also read from the same source
- Oregon, data broker registration with the Department of Consumer and Business Services (ORS 646A.593(1)(c)-(d), (2)(a))
- Oregon Consumer Privacy Act, definitions (sale) (ORS 646A.570(17)(a) (2025 ed.))
- Oregon Consumer Privacy Act, controller duties (sensitive data consent) (ORS 646A.578(2)(b) (2025 ed.))
- Oregon Consumer Privacy Act, controller's use of deidentified data (ORS 646A.583(1)(a) (2025 ed.))
Figures it counts in
It is shown on its own, not counted into a figure.
Cited in this guide