Oregon passes law increasing consumers’ access to, control over private data

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

Oregon privacy law overview:

• Who: Oregon’s governor Tina Kotek has signed a consumer data protection law.
• Why: The Oregon privacy law increases consumers’ access to and control over their private data.
• Where: The law applies to the state of Oregon.
• What are my options: Norton LifeLock carries many options when it comes to personal data security. 

Oregon’s governor Tina Kotek has signed a law that will increase consumers’ control of their sensitive data, Law360 reports.

Senate Bill 619, called the Oregon Consumer Privacy Act, was passed by both chambers of the state legislature before it was sent to Gov. Kotek’s desk. With its passage, Oregon became the 11th state to increase consumer data protections.

The Oregon privacy law requires businesses to allow consumers to access information about the data the businesses have about them and with whom that information is shared. It also requires businesses to correct any customer data inaccuracies and to delete data when requested.

Oregon consumers will also be able to opt out of the use of their personal data for targeted ads, sale, or other profiling.

Oregon privacy law requires opt-in to process information belonging to youth aged 13-15

The Oregon privacy law also requires companies to obtain consent before processing certain sensitive consumer data, delivering targeted ads, or selling personal information that belongs to youth between the ages of 13 and 15.

Sensitive consumer data according to the law includes information revealing racial or ethnic background, national origin, mental condition or diagnosis, physical condition or diagnosis, gender identity, sexual orientation, religious beliefs, immigration or citizenship status, crime victim status, geolocation information, and biometric or genetic data.

Information about children under the age of 13 must be processed in accordance with the federal Children’s Online Privacy Protection Act.

Companies may face $7,500 civil penalties per consumer data violation

Companies, including nonprofit organizations, that process or control consumer data of at least 100,000 consumers or that get half of their revenue from selling the data of more than 25,000 consumers are subject to the Oregon privacy law provisions.

Violations may result in civil penalties of up to $7,500, although companies will be granted 30 days to remedy any alleged violations before the penalties will be imposed.

The new Oregon privacy law will take effect on July 1, 2024.

Oregon Attorney General Ellen Blum describes the Oregon privacy law as setting “a high-water mark for consumer data privacy nationwide.”

The Federal Communications Commission (FCC) is reportedly introducing a new data task force to support its efforts to protect consumer data online.

What do you think about the new Oregon privacy law? Join the discussion in the comments!

Read About More Class Action Lawsuits & Class Action Settlements:

• McDonald’s class action over voice data collection at drive-thrus dismissed
• Google class action claims company wiretaps communications on major tax-filing websites
• TaxAct class action claims company shares sensitive information with Facebook, Google
• FTC announces investigation into ChatGPT over data handling