Oregon set to finalize comprehensive privacy bill

Oregon SB 619, an act relating to protections for the personal data of consumers, received final approval from the Oregon State Legislature 22 June after a 54-0 House vote to pass. The comprehensive privacy bill covers entities that control or process personal data on 100,000 consumers or derive 50% of revenue from selling the data of more than 25,000 consumers. It contains unique definitions for biometric and personal data, required data protection assessments and a 30-day right to cure that sunsets 1 Jan. 2026. Pending action from the governor, SB 619 takes effect 1 July 2024.