For covered processing, request deletion of provided, purchased, and derived personal data. Also access, correct, and
opt out of sale, targeted advertising, and qualifying profiling. Coverage and exceptions matter. Public-record data is a
major limit. An ordinary request receives a response within 45 days, with a permitted extension in qualifying cases.
Presenter reference: ORS 646A.574(1)(c) addresses deletion of data supplied by the consumer, obtained from other
sources, and derived data. ORS 646A.576(1) addresses the request channel; (5)(a) addresses the 45-day response and
permitted extension; (5)(b) and (6) address refusals and appeals. Check coverage and exceptions before applying these
provisions. Midpage marks both sections current as of October 23, 2026.
Sources:
