Oregon has a comprehensive privacy law requiring notice and giving consumers opt out and other rights. It currently exempts charities recognized under 501(c)(3) of the Internal Revenue Code, but that exemption will expire July 1, 2025, unless the Oregon legislature extends the exemption.
The law still only applies if your organization holds data of more than 100,000 Oregon residents, but you should anticipate compliance on that date if you do hold that much data by revising your public privacy policy and internal procedures before then.
Please contact William Raney if you would like assistance.
