Oregon implemented privacy-related legislation that applies to residents or activities that occur within the state, including breach notification or other data security laws. Companies in Oregon must comply not only with applicable federal law, but also with relevant state privacy and security laws and regulations.

Privacy Laws and Regulations

Consumer Identity Theft Protection Act
Breach of Security - §§ 646A.602, 646A.604
Security Freeze - §§ 646A.602, 646A.606, 646A.618
Prohibition on SSN Use - § 646A.620
Oregon Consumer Privacy Act