Operate consent + sensitive data + children/teen protections per Oregon OCPA per ORS 646A.572 + 646A.576 + 646A.578. Consent must be (a) freely given + specific + informed + unambiguous + (b) not via acceptance of general or broad terms of use + (c) revocable + with revocation as easy as initially given. Consent for sensitive personal data processing is required per ORS 646A.572 + with sensitive data including racial/ethnic origin + national origin + religious beliefs + mental/physical health condition or diagnosis + sex life + sexual orientation + status as transgender or non-binary + status as victim of crime + citizenship/immigration status + genetic/biometric data + precise geolocation + child data + criminal records + persons under 16 personal data + similar. Children and teen data protections per ORS 646A.572 include (a) opt-in consent required for sale or targeted advertising for known children under 13 + (b) opt-in consent required for sale + targeted advertising + profiling for known teens 13-15 + (c) similar protections per applicable federal law (COPPA) + state law. Maintain consent records + revocation processes + audit trail. Anti-discrimination on exercise of rights per ORS 646A.578 prohibits discrimination including charging different prices + providing different quality of service + denying goods or services unless related to financial incentive offered per ORS provisions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.