- District 4
Requires person that owns, licenses , has control over or has access to] or otherwise possesses personal information and] that was subject to breach of security or that received notice of breach of security from another person that maintains or otherwise possesses personal information on person's behalf, to notify consumer to whom personal information pertains and, if number of consumers to whom person must send notice exceeds 250, to Attorney General. Requires person that maintains or otherwise possesses personal information on behalf of another person to notify other person of breach of security. Requires person to give notice in most expeditious manner possible, without unreasonable delay, but not later than 45 days after discovering or receiving notice of breach of security. Requires person, in providing notice, to undertake reasonable measures necessary to determine sufficient contact information for notice recipients, to determine scope of breach of security and to restore reasonable integrity, security and confidentiality of personal information. Provides that if person must notify consumer of breach of security and with notice person offers credit monitoring services or identity theft prevention and mitigation services without charge to consumer, person may not condition provision of services on consumer's providing person with credit card or debit card number or consumer's acceptance of any other service person offers for fee. Requires person to separately, distinctly, clearly and conspicuously disclose to consumer in any offer for additional credit monitoring services or identity theft prevention and mitigation services that person offers for fee that person will charge consumer fee. Prohibits consumer reporting agency from charging consumer fee or collecting from consumer money or item of value for placing, temporarily lifting or removing security freeze on consumer's consumer report, creating or deleting protective record, placing or removing security freeze on protective record or replacing lost personal identification number or password. Modifies standards for safeguarding personal information. Takes effect on 91st day following adjournment sine die.
Effective date, June 2, 2018.
Chapter 010, 2018 Laws.
Senate concurred in House amendments and repassed bill.
Third reading. Carried by Holvey. Passed.
Recommendation: Do pass with amendments and be printed B-Engrossed.
Public Hearing and Work Session held.
Referred to Business and Labor.
First reading. Referred to Speaker's desk.
Third reading. Carried by Prozanski. Passed.
Recommendation: Do pass with amendments. (Printed A-Eng.)
Work Session held.
Work Session held.
Public Hearing held.
Referred to Judiciary.
Introduction and first reading. Referred to President's desk.
Presession Released to the Public.
|Bill Text Versions||Format|
|Senate Amendments to Introduced|
|House Amendments to A-Engrossed|
|No related documents.|
Data on Open States is updated periodically throughout the day from the official website of the Oregon Legislative Assembly.
If you notice any inconsistencies with these official sources, feel free to file an issue.