Honor consumer rights per Oregon OCPA per ORS 646A.574. Rights include (a) right of access including obtaining list of specific third parties to which the controller has disclosed personal data per the consumer or any consumer (Oregon-unique provision distinguishing OCPA from other state laws), (b) right to correction of inaccurate personal data, (c) right to deletion of personal data, (d) right to portability of personal data in a readily usable format, (e) right to opt out of sale of personal data + targeted advertising + profiling in furtherance of decisions producing legal or similarly significant effects on the consumer. Authorised agent requests must be honored where consumer authorises agent in writing or via permitted technical means. Rights handling must (a) verify consumer identity using commercially reasonable methods + (b) respond within 45 days extendable + (c) provide twice yearly free of charge + (d) provide accessible methods for submission. Appeal of rights decision must (a) allow consumer to appeal denied request + (b) respond within 45 days + (c) provide reasoning + (d) inform of right to contact Attorney General.
Maintained by Gerard Blokdyk·Verified against the published standard ·Control text last updated
What else in your programme already covers this
This control maps to 30 controls across 23 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.