{"id":27153,"date":"2023-06-30T07:29:02","date_gmt":"2023-06-30T07:29:02","guid":{"rendered":"https:\/\/www.2b-advice.com\/?post_type=post&p=27153"},"modified":"2024-05-25T14:54:57","modified_gmt":"2024-05-25T14:54:57","slug":"new-data-protection-law-in-oregon","status":"publish","type":"post","link":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/","title":{"rendered":"New data protection law in Oregon"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

New data protection law in Oregon: What does it mean for companies?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

On June 22, SB 619, the Oregon Consumer Privacy Act (OCPA), was passed by lawmakers in Salem. If signed into law by Governor Kotek, Oregon will become the eleventh state (and sixth in 2023) to enact comprehensive privacy laws governing the collection, use and transfer of consumer data. The majority of the OCPA's requirements will go into effect on July 1, 2024 (with the exception of nonprofit organizations, which will be subject to the law beginning July 1, 2025).<\/p>\n

For Oregon businesses or businesses doing business in Oregon, the new privacy law has some important implications. Here are the key provisions that businesses should be aware of:<\/p>\n

1. wide area of application<\/strong><\/p>\n

Unlike many other state privacy laws, the OCPA does not automatically exclude companies that are already subject to federal privacy laws. Data protection<\/a> are subject to. There are only exemptions for certain data that are already regulated by laws such as the Health Insurance Portability and Accountability Act (HIPAA) and the Gramm-Leach-Bliley Act (GLBA). In addition, non-profit organizations are not considered exempt under the OCPA, except in the case of organizations that \"detect and prevent insurance-related fraud\" or are classified as \"financial institutions\" under state law.<\/p>\n

2. extended definitions of recorded data<\/strong><\/p>\n

The OCPA refers to \"personal information\" and also establishes a category of \"sensitive information\" that is afforded special protection. However, the definition of \"personal information\" in the OCPA is unique in that it explicitly includes \"derived information\", i.e. inferences about a customer, as well as information associated with a \"device\" that can reasonably be attributed to one or more individuals in a \"household\". Unlike similar laws, there is no specific definition and exceptions for pseudonymized data in the OCPA.<\/p>\n

The definition of \"sensitive information\" in Oregon law is also broader than in other states and includes \"race\", \"gender identity as transgender or non-binary\" and \"victim status of a crime\", among others. In addition, the OCPA defines the term \"biometric data\" broadly and includes information that uniquely identifies an individual. However, there is an exception for \"facial mapping or facial geometry\", provided that these technologies are not used to uniquely identify an individual.<\/p>\n

3. new consumer rights<\/strong><\/p>\n

The OCPA grants consumers a number of rights that are now widely accepted, such as the right to confirmation of the<\/p>\n

data processing, access, rectification, erasure, portability of personal information, as well as the right to object to targeted advertising, data sales and significant profiling decisions. One interesting aspect of the OCPA, however, is the right of consumers to request a list of \"specific third parties\" to whom a business discloses personal information. This presents an operational challenge and is similar to the requirements set forth in recently enacted healthcare privacy laws in Washington State and Nevada. In addition, the OCPA is the first comprehensive privacy law to explicitly provide for the right to erasure of \"derivative data\".<\/p>\n

4. stricter obligations for data controllers<\/strong><\/p>\n

The OCPA imposes a number of obligations on affected companies that are already familiar from other data protection laws, such as maintaining adequate data security, contractual requirements for processors, publishing privacy statements and obtaining consent for the processing of sensitive data. However, the obligations in the OCPA are somewhat stricter than in comparable laws in other states. For example, data controllers must obtain explicit consent to profile data from young people aged 13 to 15 for significant decisions. In addition, the OCPA notes that design mechanisms intended to interfere with consumer choice may invalidate consumer consent under the Act. Finally, the law requires that privacy impact assessments be retained for a period of five years. Only Colorado has established similar retention periods in its implementing regulations.<\/p>\n

5. data use and exchange for research purposes<\/strong><\/p>\n

The OCPA contains exceptions to consumer rights and obligations for certain uses of personal information, such as internal operations that meet consumer expectations, complying with law enforcement investigative requests, and maintaining data security. However, unlike other privacy laws, there are no specific requirements in the OCPA for the use of data for research purposes. As long as the use of identifying data is in compliance with applicable law, companies are exempt from the consumer rights and obligations of the Act.<\/p>\n

Oregon's new privacy law presents changes and challenges for businesses. It is important that companies, especially those in Oregon or doing business in Oregon, carefully review the provisions of the OCPA and take appropriate steps to comply with the requirements of the law and ensure the protection of consumer data.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

New privacy law in Oregon: What does it mean for businesses? On June 22, SB 619, the Oregon Consumer Privacy Act (OCPA), was passed by lawmakers in Salem. If signed into law by Governor Kotek, Oregon will become the eleventh state (and sixth in 2023) to enact comprehensive privacy laws governing the collection, use and transfer of consumer data. The majority ...<\/p>","protected":false},"author":1,"featured_media":27155,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-27153","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-datenschutz-unternehmen"],"yoast_head":"\nNeues Datenschutzgesetz in Oregon<\/title>\n<meta name=\"description\" content=\"Am 22. Juni wurde SB 619, das Oregon Consumer Privacy Act (OCPA), von den Gesetzgebern in Salem verabschiedet.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/2b-advice.com\/en\/2023\/06\/30\/new-data-protection-law-in-oregon\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Neues Datenschutzgesetz in Oregon\" \/>\n<meta property=\"og:description\" content=\"Am 22. Juni wurde SB 619, das Oregon Consumer Privacy Act (OCPA), von den Gesetzgebern in Salem verabschiedet.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/2b-advice.com\/en\/2023\/06\/30\/new-data-protection-law-in-oregon\/\" \/>\n<meta property=\"og:site_name\" content=\"Ailance\" \/>\n<meta property=\"article:published_time\" content=\"2023-06-30T07:29:02+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-25T14:54:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/2b-advice.com\/wp-content\/uploads\/2023\/06\/state-of-oregon.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"799\" \/>\n\t<meta property=\"og:image:height\" content=\"495\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"2BAdviceAilance\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"2BAdviceAilance\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/\"},\"author\":{\"name\":\"2BAdviceAilance\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/3288798779afc19fd56581c31f3b8ff8\"},\"headline\":\"Neues Datenschutzgesetz in Oregon\",\"datePublished\":\"2023-06-30T07:29:02+00:00\",\"dateModified\":\"2024-05-25T14:54:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/\"},\"wordCount\":770,\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/state-of-oregon.jpg\",\"articleSection\":[\"Datenschutz\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/\",\"name\":\"Neues Datenschutzgesetz in Oregon\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/state-of-oregon.jpg\",\"datePublished\":\"2023-06-30T07:29:02+00:00\",\"dateModified\":\"2024-05-25T14:54:57+00:00\",\"description\":\"Am 22. Juni wurde SB 619, das Oregon Consumer Privacy Act (OCPA), von den Gesetzgebern in Salem verabschiedet.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/#primaryimage\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/state-of-oregon.jpg\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/state-of-oregon.jpg\",\"width\":799,\"height\":495},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2023\\\/06\\\/30\\\/neues-datenschutzgesetz-in-oregon\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/2b-advice.com\\\/de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Neues Datenschutzgesetz in Oregon\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"name\":\"2B Advice\",\"description\":\"By 2B Advice\",\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\",\"name\":\"2B Advice GmbH\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"width\":287,\"height\":401,\"caption\":\"2B Advice GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/2b-advice-group\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/3288798779afc19fd56581c31f3b8ff8\",\"name\":\"2BAdviceAilance\",\"sameAs\":[\"https:\\\/\\\/2b-advice.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"New data protection law in Oregon","description":"On June 22, SB 619, the Oregon Consumer Privacy Act (OCPA), was passed by lawmakers in Salem.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/new-data-protection-law-in-oregon\/","og_locale":"en_US","og_type":"article","og_title":"Neues Datenschutzgesetz in Oregon","og_description":"Am 22. Juni wurde SB 619, das Oregon Consumer Privacy Act (OCPA), von den Gesetzgebern in Salem verabschiedet.","og_url":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/new-data-protection-law-in-oregon\/","og_site_name":"Ailance","article_published_time":"2023-06-30T07:29:02+00:00","article_modified_time":"2024-05-25T14:54:57+00:00","og_image":[{"width":799,"height":495,"url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2023\/06\/state-of-oregon.jpg","type":"image\/jpeg"}],"author":"2BAdviceAilance","twitter_card":"summary_large_image","twitter_misc":{"Written by":"2BAdviceAilance","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/#article","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/"},"author":{"name":"2BAdviceAilance","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/3288798779afc19fd56581c31f3b8ff8"},"headline":"Neues Datenschutzgesetz in Oregon","datePublished":"2023-06-30T07:29:02+00:00","dateModified":"2024-05-25T14:54:57+00:00","mainEntityOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/"},"wordCount":770,"publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2023\/06\/state-of-oregon.jpg","articleSection":["Datenschutz"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/","url":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/","name":"New data protection law in Oregon","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/#primaryimage"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2023\/06\/state-of-oregon.jpg","datePublished":"2023-06-30T07:29:02+00:00","dateModified":"2024-05-25T14:54:57+00:00","description":"On June 22, SB 619, the Oregon Consumer Privacy Act (OCPA), was passed by lawmakers in Salem.","breadcrumb":{"@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/#primaryimage","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2023\/06\/state-of-oregon.jpg","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2023\/06\/state-of-oregon.jpg","width":799,"height":495},{"@type":"BreadcrumbList","@id":"https:\/\/2b-advice.com\/en\/2023\/06\/30\/neues-datenschutzgesetz-in-oregon\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/2b-advice.com\/de\/"},{"@type":"ListItem","position":2,"name":"Neues Datenschutzgesetz in Oregon"}]},{"@type":"WebSite","@id":"https:\/\/2b-advice.com\/en\/#website","url":"https:\/\/2b-advice.com\/en\/","name":"2B Advice","description":"By 2B Advice","publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/2b-advice.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/2b-advice.com\/en\/#organization","name":"2B Advice GmbH","url":"https:\/\/2b-advice.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","width":287,"height":401,"caption":"2B Advice GmbH"},"image":{"@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/2b-advice-group\/"]},{"@type":"Person","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/3288798779afc19fd56581c31f3b8ff8","name":"2BAdviceAilance","sameAs":["https:\/\/2b-advice.com"]}]}},"permalink_manager":null,"_links":{"self":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/27153","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/comments?post=27153"}],"version-history":[{"count":3,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/27153\/revisions"}],"predecessor-version":[{"id":28639,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/27153\/revisions\/28639"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media\/27155"}],"wp:attachment":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media?parent=27153"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/categories?post=27153"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/tags?post=27153"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}