Operate within Oregon OCPA enforcement framework + maintain training + compliance monitoring per ORS 646A.583 + 646A.586. Cure Period and Attorney General Enforcement: (a) Oregon Attorney General has exclusive enforcement authority through ORS 646A.583, (b) initial 30-day cure period available for alleged violations during 1 July 2024 through 1 January 2026 (sunsetting after that date), (c) civil penalty up to USD 7,500 per violation, (d) Attorney General may issue investigative demands + bring civil action. Non Profit Effective Date and Phased Compliance: (a) non-profit organisations have 1 July 2025 effective date allowing additional preparation time, (b) phased compliance approach permits operational readiness build. Compliance monitoring and auditing must (a) implement internal compliance programme covering policy + procedure + training + measurement, (b) conduct periodic audit + assessment + with documented findings + remediation. Training and awareness programs must (a) train personnel handling personal data + (b) maintain training records + (c) refresh on substantive change. Regulatory reporting and cooperation must cooperate with AG investigations + (a) respond to investigative demands + (b) maintain documentation for AG review. Complaints handling and resolution must (a) provide consumer complaint mechanism + (b) respond within statutory timeframes + (c) document resolution + (d) inform consumer of right to contact AG. Enforcement and penalties awareness must train relevant personnel on enforcement framework + civil penalty exposure + cooperation expectations.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.