Control and Processing of Consumer Personal Data | Midpage

Collections
Oregon Revised Statutes

Control and Processing of Consumer Personal Data

Control and Processing of Consumer Personal Data

646A.570Definitions 646A.572Scope and application; exclusions 646A.574Consumer requests for personal data; requirement to correct inaccuracies; requirement to delete personal data; conditions under which consumer may opt out of personal data processing; format for providing copy of personal data to consumer 646A.576Method for requesting personal data; persons who may request personal data on consumer’s behalf; designation by consumer; duties of controller; process for appealing controller’s refusal of consumer request 646A.578Duties of controller; prohibitions; privacy notice to consumer 646A.581Duties of processor of personal data; contract between controller and processor; liabilities of controller and processor 646A.583Controller’s use of deidentified data; exclusions 646A.586Data protection assessment for processing activities with heightened risk of harm; criteria for conducting data protection assessment; provision to Attorney General; retention of records; confidentiality 646A.589Investigative demand by Attorney General; representation by counsel; confidentiality of proceedings and materials; action to impose civil penalty or obtain injunction; amount of civil penalty; notice of violation; time limit on action; Attorney General’s exclusive authority