Oregon SB 619, an act relating to protections for the personal data of consumers, received final approval from the Oregon State Legislature 22 June after a 54-0 House vote to pass. The comprehensive privacy bill covers entities that control or process personal data on 100,000 consumers or derive 50% of revenue from selling the data of more than 25,000 consumers. It contains unique definitions for biometric and personal data, required data protection assessments and a 30-day right to cure that sunsets 1 Jan. 2026. Pending action from the governor, SB 619 takes effect 1 July 2024.
26 June 2023
Oregon set to finalize comprehensive privacy bill
Related stories
Notes from the IAPP Canada: Ontario IPC shares enforcement philosophy with law students
Notes from the IAPP Europe: Wrapping up November with the IAPP DPC
Ireland's DPC details legitimate interest prong of its LinkedIn enforcement action
What the new European Commission could mean for digital regulation
IAPP DPC 2024: Reynders discusses GDPR enforcement harmonization, adequacy developments