Here is the honest situation. The Oregon Consumer Privacy Act gives consumers the familiar rights, access, correction, deletion, portability and opt-out of sale, targeted advertising and profiling, plus a distinctive right to obtain a list of the specific third parties to which their data was disclosed. It requires opt-in consent for sensitive data, recognition of universal opt-out signals, data protection assessments, and processor contracts, and it reaches certain nonprofits. A controller that cannot show its rights handling, its specific third-party list, its opt-outs or its assessments is exactly where controllers fall short.
This Kit removes the guesswork. It is the OCPA written as adopt-ready controls you personalize in a weekend, with the evidence the Attorney General examines.
What you get, the moment you buy
Grounded in the Oregon Consumer Privacy Act (SB 619), with applicability including nonprofits, the consumer rights and the specific third-party list, the privacy notice, opt-out and universal opt-out signals, opt-in consent for sensitive data, data protection assessments, processor contracts and enforcement called out. Editable Word and Excel files.
What one control looks like
This is determining applicability, where the Act begins. All 18 are built to this depth.
Why this is not another template pack
- The evidence is the point. An obligation you cannot evidence is enforcement exposure. This tells you what the Attorney General examines and where controllers fall short, for every obligation.
- The unique Oregon features built in. The specific third-party list, the universal opt-out signals, the opt-in sensitive-data consent and the assessments are written into the controls, accurately to the OCPA.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. The OCPA sits alongside the other state privacy laws, so this work feeds your wider multi-state privacy program.
Who buys this
Businesses and certain nonprofits processing the personal data of Oregon consumers and their privacy, legal and compliance leads. Whether it is a first alignment or a multi-state privacy uplift, you save weeks and walk in with rights, the third-party list, opt-out, consent and assessments structured.
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
Is this legal advice? No. It is an implementation toolkit grounded in the Act. For a specific matter consult counsel; this gets your controls and evidence in order fast.
Does it cover the specific third-party list? Yes. Oregon's unique right to a list of specific third parties is built as a control.
Does it cover data protection assessments? Yes. Conducting assessments for higher-risk processing is built as a control.
What if it is not for me? A 30-day money-back guarantee.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com