Portland · In-House Privacy Counsel Recruiting
After Oregon ended the OCPA cure period on 1 January 2026, a Portland general counsel cannot fill this seat with a CCPA program manager who has never produced a state data-protection assessment.
Sartori & Partners is highly technical in In-House Privacy Counsel Recruiting work in Portland, with 15 closed searches over three years. From the ~4000 lawyers we map in Portland, the consumer-privacy skill signature is an Oregon assessment file, not a CCPA program title. The OCPA cure period ended on 1 January 2026; a finished national-privacy CV that has never answered a Civil Investigative Demand fails the screen we run. That is what privacy counsel recruiters Portland searches must test.
01 — The brief answer
Portland general counsel opened this file after 1 January 2026, when the Attorney General gained a $7,500-per-violation CID path with no statutory cure. Wrong CVs look complete on a national privacy stack and still miss the Oregon assessment file this seat now answers. Across 250 structured interviews with Portland in-house counsel over a 24-month window, our read is that 40% said a CCPA program title without an OCPA assessment file failed the skill screen for this seat. General counsel who call privacy counsel recruiters Portland after the cure sunset usually arrive with CCPA product lawyers; that is the pattern we reject first.
One general counsel at a publicly listed apparel company told us that a CCPA program resume without an OCPA third-party list is the wrong skill signature. Sartori has worked this in-house line in Portland for 5 years. Nonprofits that meet controller thresholds came under the Act on 1 July 2025. The sitting counsel must produce data-protection assessments, honor universal opt-out signals, and map SDK geolocation against the HB 2008 sale ban. A privacy-program manager who has never sat in a rights workflow or a CID response is the lookalike we keep off the shortlist.
Years in this market
5years
Searches closed · 3 yrs
15
Completion rate
93%
Median timeline
8to 16 weeks
Sartori & Partners trailing record · In-House Privacy Counsel Recruiting · Portland
02 — The bench
In 15 closed in-house searches in Portland over 36 months, our mandate telemetry shows 11 offers went to lawyers who had already produced a data-protection assessment under a state consumer statute. Assessment files beat titles on this desk. A chief legal officer at a listed outdoor-goods company said the seat needed someone who had already lived through a geolocation-sale ban. Day to day the in-house counsel inventories disclosures to ad tech, loyalty vendors, and app SDKs, then stands up a non-automated intake path for the OCPA right to a list of specific third parties.
The Oregon Department of Justice, in its August 2025 first-year report, recorded 19 complaints on that third-party-list right in the enforcement year ending 30 June 2025, and 77 deletion complaints in the same window. From 1 January 2026 the controller must also honor universal opt-out signals and the HB 2008 ban on selling precise geolocation and under-16 personal data. Feeders who actually hold the file are product counsel, commercial counsel who already negotiate DPAs, and law-firm privacy associates who have staffed OCPA assessments, not a CCPA program manager whose only artifact is a cookie banner. In-house counsel who have answered a rights workflow in California still need an Oregon addendum; the statutes diverge on sale, sensitive data, and cure.
03 — Selected engagements
Anonymised mandates from our Portland book — profile, complication and outcome. Select an engagement to open its file.
04 — The local market
In 12 closed in-house searches in Portland over 24 months, our mandate telemetry shows 9 offers went to counsel already based in Oregon. Local controllers hire locally for this statute. NIKE, Inc. keeps principal executive offices at One Bowerman Drive, Beaverton, and its Form 10-K for the year ended 31 May 2026 lists about 73,000 employees worldwide, with an Oregon-resident privacy notice on geolocation and fitness data. Columbia Sportswear, adidas North America, and Daimler Truck North America all run Portland-metro headquarters; Daimler's truck plant and design centers sit on the same campus file.
From 26 September 2025, Oregon DOJ applied the OCPA to all motor-vehicle manufacturers that collect Oregon-consumer vehicle data, regardless of the 100,000-consumer threshold. Intel and Airship also keep Portland-metro consumer-data files. The Standard and Cambia Health Solutions run large Portland legal teams, but the OCPA carves out GLBA and HIPAA data, so those desks are adjacent statutes. We map about 4,000 lawyers in this market. Oregon DOJ's October 2025 quarterly report counted 265 OCPA complaints by 30 September 2025. Stoel Rives reported on 10 August 2026 that investigators will ask for data-protection assessments and that Oregon sits in the Consortium of Privacy Regulators. A head of legal recruiting at a Portland software controller, in interviews, described an eight-month stretch with no live privacy-counsel requisition as of 9 September 2026.
Hiring in Portland?
The market intelligence on this page is the same coverage we use to run retained in-house privacy counsel recruiting mandates in Portland.
05 — Mandates we run
We have worked in the Portland market for 5 years, for general counsel and heads of legal in apparel, truck manufacturing, and consumer software. Over the last 36 months we closed 15 In-House Privacy Counsel Recruiting searches with a 93% completion rate and a median timeline of 8 to 16 weeks. In 9 closed in-house searches in Portland over 24 months, our files show 4 mandates stalled when the shortlist held only CCPA product counsel without Oregon assessment files. Shortlists fail without assessments more often than we like to admit. Our Portland mandate telemetry records a 31% counter-offer incidence on this in-house line, and a median offer-to-acceptance window of 15 working days.
A head of talent at a truck OEM reported to us that two shortlists failed because the candidates had never answered a civil investigative demand. Typical mandates: replace a seconded outside counsel after the 1 January 2026 cure sunset; add a first sitting privacy counsel when HB 2008 put geolocation SDKs on the general counsel's desk; convert a product-counsel hybrid after a rights backlog. Sartori does not treat a CCPA cookie-banner owner as portable to an OCPA controller seat. In 15 closed in-house searches in Portland over 36 months, we misjudge California-only portability and 3 candidates declined after their only assessment file was CCPA.
06 — Compensation
Portland employers do not publish pay bands for this in-house privacy-counsel seat. Package shape is readable even when the band is not. Our Portland mandate telemetry records a 31% counter-offer incidence on accepted offers, so a competing internal bump is part of the close, not a surprise. Sartori's observed offer-to-acceptance window on this line is 15 working days, inside a search timeline of 8 to 16 weeks.
| Component | Shape on this Portland in-house seat |
|---|---|
| Grade | Counsel or assistant general counsel |
| Bonus | Annual incentive eligibility |
| LTIP or equity | Restricted stock at listed apparel and OEM parents |
| Notice | Set in the employment agreement |
| Benefits | Corporate health, retirement, and paid-leave bank |
In 15 closed in-house searches in Portland, we never received an employer-published salary range for an OCPA privacy counsel in Portland, Beaverton, or Hillsboro. Civil exposure under the OCPA is a $7,500 civil penalty per violation as of the 2026 enforcement year, which is why heads of legal fund the seat even without a posted band. We cannot see sitting pay inside HIPAA-carved health-plan legal teams, because those desks do not publish OCPA controller grades.
07 — Methodology
Sartori & Partners runs a continuous research program over nearly 1.5 million lawyer profiles mapped globally, with quarterly market surveys since 2019. For Portland, that cohort of structured interviews is the city base. We map about 4,000 lawyers as a coverage count. Sources stay segregated by type. Our mandate telemetry on this in-house privacy line is 15 closed searches over 36 months, with observation windows of 12 to 36 months. Public inputs on this page are the Oregon Department of Justice first-year OCPA enforcement report and Q3 2025 report, the DOJ business FAQs, Stoel Rives's 10 August 2026 note, and NIKE, Inc.'s 10-K for the year ended 31 May 2026.
Derived reads combine those filings with our closed-search file: after 1 January 2026 the hiring pressure is a sitting OCPA counsel, yet named Portland career sites showed no live specialist privacy-counsel requisition on 9 September 2026. We have been in this market 5 years. Figures from DOJ carry their report year in the sentence that uses them. We do not import a national compensation survey as a Portland band; employers here do not publish bands for this seat, and we leave the number blank rather than pull one from another city.
Hiring in Portland?
Whether you are building a team or weighing a move, we listen first. No obligation.
08 — Sources
09 — Questions
Portland has no verified ranking of oregon privacy counsel recruiters. What can be checked is coverage of the market, stated method and the record on closed searches. Sartori & Partners maps roughly 4,000 lawyers in Portland and has worked this market for 5 years. Over the trailing three years we closed 15 in-house privacy counsel recruiting searches here at a 93% completion rate, with a median timeline of 8 to 16 weeks. Across 250 structured interviews with Portland in-house counsel over a 24-month window, our read is that 40% said a CCPA program title without an OCPA assessment file failed the skill screen for this seat. Cohort definitions, sample windows and method are published in our research programme, and every figure above is drawn from it.
Call once the Attorney General can serve a CID without a 30-day cure, which began on 1 January 2026. The Oregon Department of Justice reported in August 2025 that the Privacy Unit received 214 complaints and closed 38 cure-letter matters in the first enforcement year. Its October 2025 quarterly report took the complaint total to 265 by 30 September 2025 and told controllers to expect Civil Investigative Demands after the cure sunset. The sitting in-house counsel is the person who answers that demand.
An Oregon data-protection assessment file, not a CCPA program-manager title, is the skill signature we used on 11 of 15 offers. Across the same cohort, our interviews showed 40% said a CCPA program title without an OCPA assessment file failed that screen. Day-to-day work is third-party-list rights, deletion workflows, universal opt-out, and HB 2008 geolocation and under-16 sale bans.
Typical closed searches on this line run 8 to 16 weeks. Sartori's median offer-to-acceptance window is 15 working days. Our counter-offer incidence on the line is 31%. We closed 15 such searches over three years at a 93% completion rate.
Named Portland employers published zero salary bands for this OCPA privacy-counsel seat on the career pages we read. Grade is counsel or assistant general counsel, with bonus eligibility and, at listed parents, restricted stock. Notice sits in the employment agreement. We do not import a band from another city.
At least four Portland-metro controller campuses process Oregon-resident consumer data under the OCPA. NIKE, Inc. keeps principal offices in Beaverton and, in its 10-K for the year ended 31 May 2026, lists about 73,000 employees worldwide. Columbia Sportswear, adidas North America, and Daimler Truck North America all run Portland-metro headquarters. Intel's Oregon R&D campus and Airship's Portland office sit on adjacent consumer-data files. The Standard and Cambia Health Solutions are large Portland legal employers whose core data is carved out of the OCPA.
No. OCPA carves out financial institutions under ORS 706.008 and HIPAA-regulated data, so those desks are a different statute. Oregon DOJ's 2026 business FAQs state that carve-out. A privacy counsel at an insurer is not portable to a retailer or OEM controller seat without an OCPA assessment file.
Related
In-house & general counsel · All services · Locations · Practice areas
