Oregon Consumer Privacy Act (OCPA) Awareness Course

Coming Soon: March 2026 Delivery: 100% online Duration: 35-40 minutes Certificate on Completion

0:00

15,000+ learners across our course collection. Immediate access on launch. 14 day 100% money-back guarantee.

Oregon has taken privacy enforcement seriously by establishing a dedicated Privacy Unit within the Attorney General's office. With a consumer complaint portal and specialized enforcement resources, the OCPA signals that Oregon intends to be active in protecting consumer privacy rights.

This course gives your team practical guidance on the Oregon Consumer Privacy Act. We cover who the law applies to, what rights Oregon residents have, the unique third-party recipient disclosure requirement, and what the dedicated Privacy Unit means for enforcement.

The OCPA includes broader sensitive data categories than many other states, including national origin and immigration status. The cure period ends January 1, 2026. No technical background required - just focused, practical training your team can apply immediately.

Why learn about the OCPA?

Understand a law with dedicated enforcement resources (Privacy Unit)
Know the unique right to third-party recipient lists
Handle broader sensitive data categories correctly
Prepare for enforcement without cure period from January 2026
Avoid penalties of up to $7,500 per violation

Course features

Oregon-specific

Focused entirely on the OCPA with Oregon-specific requirements, thresholds, and enforcement context.

Practical scenarios

Real-world examples showing how the OCPA applies in everyday business situations.

Enforcement insights

Understand the Privacy Unit and consumer portal that signal Oregon's enforcement priorities.

Official sources

Built from Oregon statutes and Attorney General guidance, with references to official documentation.

Learning with us

Course information

Learning outcomes

Understand when and how the OCPA applies to your organisation
Know the rights Oregon residents have over their personal data
Understand the third-party recipient disclosure requirement
Conduct data protection assessments correctly
Prepare for the Privacy Unit's enforcement approach

Training recommendations

All employees who handle customer data should complete this training.
Annual refresher training is recommended to stay current with enforcement trends.
Teams handling consumer requests may benefit from additional role-specific training.

This course is recommended for

Employees who handle customer data at organisations that conduct business in Oregon or target Oregon residents. This includes marketing, sales, customer service, HR, IT, and compliance teams.

Prerequisites

There are no prerequisites for this course. No legal or technical background is required.

What do I need for this course?

This course is 100% online and delivered through our online learning platform. Organisations can also access this content via their own LMS on request (SCORM format available).

Course content

Section 1: Understanding Oregon's Privacy Framework

In this section we introduce the Oregon Consumer Privacy Act and explain what makes it unique. Oregon has created a dedicated Privacy Unit and consumer portal, signaling serious commitment to privacy enforcement.

Lessons

Introduction to the OCPA
Who the law applies to
Key definitions explained
Oregon residents and their rights

Section 2: Consumer Rights Under the OCPA

Oregon residents have comprehensive rights over their personal data. This section covers what those rights are, including the unique right to a list of third parties data has been shared with.

Lessons

The right to know and access
The right to correct and delete
The right to data portability
The right to a list of third-party recipients
The right to opt out of sales and targeted advertising
Opt-out of profiling
Handling consumer requests

Section 3: Sensitive Data and Consent

Oregon requires opt-in consent before processing sensitive data, with some categories broader than other states. We explain what counts as sensitive data under Oregon law.

Lessons

What is sensitive data under OCPA?
The opt-in consent requirement
National origin and immigration status
Children's data protections
Biometric and genetic data
Practical consent workflows

Section 4: Data Protection Assessments

Oregon requires data protection assessments for certain processing activities. This section covers when assessments are required and the unique retention requirements.

Lessons

When assessments are required
Assessment components and process
Targeted advertising assessments
Profiling assessments
Retention requirements

Section 5: Operational Requirements

This section covers the day-to-day operational requirements including privacy notice requirements, security obligations, and processor contracts.

Lessons

Data minimisation principles
Purpose limitation
Security requirements
Processor contracts and obligations
Privacy notice requirements

Section 6: Enforcement and the Privacy Unit

Oregon has established a dedicated Privacy Unit within the Attorney General's office and a consumer complaint portal. Understand this unique enforcement structure and what it means for compliance.

Lessons

The Oregon Privacy Unit
Consumer complaint portal
Attorney General enforcement
The cure period (ending January 2026)
Penalties and remedies
Responding to investigations

Section 7: Assessment

Test your knowledge with scenario-based questions covering all the key OCPA concepts from the course.

Lessons

Knowledge check (10 questions)

How it works

Step 1

Get notified

Sign up to be notified when this course launches. You'll be among the first to know and can start training your team immediately.

Step 2

Start learning

Each team member will have access to the learning materials and assessment. On completion of the course, team members will be issued with a certificate.

Step 3

Stay compliant

As the OCPA evolves, we'll update the course. Trainees can review updated materials to stay current with enforcement trends from the Privacy Unit.

What's included

Training

Distraction-free online learning platform
Scenario-based end of course assessment

Updates

Access to all course material updates and enhancements for the length of your access period

Certification

Certificate on completion

Course FAQs

Will I get a certificate?

Yes, on completion of the course you will be issued with a digital certificate. It will be issued by our team shortly after completion of the course including the end of course assessment. You can add this to your LinkedIn profile.

Who should take this course?

This course is designed for employees who handle customer data at organisations that may be subject to Oregon's privacy law. This includes marketing, sales, customer service, HR, and IT teams.

How is the OCPA different from other US state privacy laws?

Oregon has created a dedicated Privacy Unit within the Attorney General's office and a consumer portal for submitting complaints, signaling serious enforcement intent. The OCPA also includes unique requirements like the right to a list of third-party recipients and broader sensitive data categories including national origin and immigration status.

Does the OCPA apply to my organisation?

The OCPA applies to organisations that conduct business in Oregon or target Oregon residents, AND either: (a) control or process personal data of 100,000+ Oregon consumers, or (b) control or process data of 25,000+ Oregon consumers and derive 25%+ of gross revenue from selling personal data.

What are the penalties for non-compliance?

The Oregon Attorney General can impose civil penalties of up to $7,500 per violation. The cure period ends January 1, 2026, after which enforcement can proceed without a cure opportunity. The dedicated Privacy Unit suggests Oregon will be active in enforcement.

Is there a money back guarantee?

Yes, we offer a 14-day 100% money-back guarantee. If you are not satisfied with the course for any reason, simply contact us within 14 days of purchase for a full refund.

How long does the course take?

The course typically takes 35-40 minutes to complete. You can pause and resume at any time, and your progress is automatically saved.