 Data brokers and companies with large databases have new rules to follow in Oregon. The Consumer Privacy Protection Act is now in effect. Kristen Hilton in the Oregon Attorney General's office says it applies to businesses with over 100,000 people in their database. If a business is subject to the law, then every consumer in Oregon has a right to exercise their privacy rights with respect to that business.