{"data":{"id":"us-or/ors-646a.574","jurisdiction":"us-or","citation":"ORS 646A.574","heading":"Consumer requests for personal data; requirement to correct inaccuracies; requirement to delete personal data; conditions under which consumer may opt out of personal data processing; format for providing copy of personal data to consumer.","body":"(1) Subject to ORS 646A.576, a consumer may:\n      (a) Obtain from a controller:\n      (A) Confirmation as to whether the controller is processing or has processed the consumer’s personal data and the categories of personal data the controller is processing or has processed;\n      (B) At the controller’s option, a list of specific third parties, other than natural persons, to which the controller has disclosed:\n      (i) The consumer’s personal data; or\n      (ii) Any personal data; and\n      (C) A copy of all of the consumer’s personal data that the controller has processed or is processing;\n      (b) Require a controller to correct inaccuracies in personal data about the consumer, taking into account the nature of the personal data and the controller’s purpose for processing the personal data;\n      (c) Require a controller to delete personal data about the consumer, including personal data the consumer provided to the controller, personal data the controller obtained from another source and derived data; or\n      (d) Opt out from a controller’s processing of personal data of the consumer that the controller processes for any of the following purposes:\n      (A) Targeted advertising;\n      (B) Selling the personal data; or\n      (C) Profiling the consumer in furtherance of decisions that produce legal effects or effects of similar significance.\n      (2) A controller that provides a copy of personal data to a consumer under subsection (1)(a)(C) of this section shall provide the personal data in a portable and, to the extent technically feasible, readily usable format that allows the consumer to transmit the personal data to another person without hindrance.\n      (3) This section does not require a controller to disclose the controller’s trade secrets, as defined in ORS 646.461.","path":["16 - Trade Practices, Labor and Employment","50. Trade Regulations and Practices","Chapter 646A — Trade Regulation"],"source_url":"https://www.oregonlegislature.gov/bills_laws/ors/ors646A.html","current_through":"2025 Edition","vintage":"","retrieved_at":"2026-09-03T23:50:16Z","sha256":"58f95d13af2a55d2a36536c836e40dacfce4b1a4defd09c53a052cae96326e10","source_id":"us-or","stale":false,"prev":"us-or/ors-646a.572","next":"us-or/ors-646a.575"},"notice":"GroundRules: Original legal text. Not legal advice."}