HB 2008, Oregon Consumer Privacy Act minors and geolocation amendments
In forceOr. Rev. Stat. section 646A.578 (2025 Or. Laws ch. 251)
Bars a controller that has actual knowledge that, or willfully disregards whether, a consumer is under 16 from selling that consumer's personal data, using it for targeted advertising, or profiling in furtherance of decisions with legal or similarly significant effects, with no consent exception, and separately bars selling personal data that identifies a consumer's location within a 1,750 foot radius. Signed by Governor Kotek on June 3, 2025.
| Age threshold | 16 |
| Penalties | Enforced exclusively by the Attorney General under ORS 646A.589, with civil penalties of up to $7,500 per violation; the statute expressly creates no private right of action, and its 30 day cure period sunset on January 1, 2026 |
| Enforcement body | Oregon Department of Justice |
| Private suits | no |
Source: Or. Rev. Stat. section 646A.578 (2025 Or. Laws ch. 251)