State Children's Privacy Law Tracker / Oregon
Oregon Children's Privacy Laws (2026)
1 law tracked · overall: In force · current as of June 28, 2026
Oregon has one tracked children's privacy law — each listed below with its status, the ages it covers, litigation posture, and a link to the official primary source. For the interactive view, open Oregon in the tracker map.
Oregon Consumer Privacy Act (OCPA) — minors' provisions · SB 619 (2023), as amended by HB 2008 (2025)
In force — Effective and enforceable today. · Privacy law (minors) · effective 2024-07-01 · binds operators
Ages: Children under 13 (per COPPA); minors under 16
Requires: A controller must process the sensitive data of a consumer it knows is under 13 in accordance with COPPA (15 U.S.C. 6501 et seq.), which requires verifiable parental consent. As amended by HB 2008 effective January 1, 2026, a controller that has actual knowledge of, or willfully disregards, that a consumer is under 16 may not process that consumer's personal data for targeted advertising or profiling, and may not sell that consumer's personal data — and, unlike the prior 13-15 rule, consent no longer cures the prohibition.
Primary sourceRegardless of state law, COPPA governs personal information collected from children under 13: notice, verifiable parental consent, data minimization, and — under the 2025 amended Rule — limits on retention and third-party sharing.
SourceHow Oregon compares
- Privacy law (minors): Oregon is one of 21 states tracking privacy law (minors) legislation — California, Connecticut, Delaware, Florida, Indiana, Iowa and 14 more
Not legal advice. I build products for a living; I'm not a lawyer. Compiled from primary sources and reviewed monthly as part of the State Children's Privacy Law Tracker; AI-assisted research, verified against each law's official source — but laws and injunctions change fast, so confirm the latest before relying on it. Related: COPPA's Gray Areas.