Relating to data security; prescribing an effective date.
Catchline/Summary:
Requires person that owns, licenses, has control over or has access to personal information and was subject to breach of security to notify consumer to whom personal information pertains and, if number of consumers to whom person must send notice exceeds 250, to Attorney General.Prohibits consumer reporting agencies from charging certain fees related to security freezes on consumer reports or protective records.]
Requires certain persons who own, license, possess or have access to personal consumer information to give notice of breach of data security to certain financial institutions and merchant services providers. Requires financial institutions and merchant services providers that discover or receive notice of data breach of another person to notify other person.]
Requires notice of data breach to be given within 45 days of discovery of breach, unless such notice will impede criminal investigation.]
Prohibits person providing free credit monitoring in connection with data breach from offering additional services, unless such services are free, or from conditioning free credit monitoring on acceptance of other services.]
Modifies standards for safeguarding of personal information.]
Permits person to initiate civil action on behalf of state for violations of Oregon Consumer Identity Theft Protection Act. Provides that person may receive award of no greater than 25 percent of monetary recovery. Provides that state may intervene and proceed with such action. Provides that when person or state prevails in such action, court shall award reasonable attorney fees and costs.]
Requires person that owns, licenses, has control over or has access to personal information and was subject to breach of security to notify consumer to whom personal information pertains and, if number of consumers to whom person must send notice exceeds 250, to Attorney General. Requires person to give notice in most expeditious manner possible, without unreasonable delay, but not later than 45 days after discovering or receiving notice of breach of security. Requires person, in providing notice, to determine sufficient contact information for notice recipients, to determine scope of breach of security and to restore integrity, security and confidentiality of personal information.
Provides that if person must notify consumer of breach of security and with notice person offers credit monitoring services or identity theft prevention and mitigation services without charge to consumer, person may not condition provision of services on consumer's providing person with credit card or debit card number or consumer's acceptance of any other service person offers for fee. Requires person to separately, distinctly, clearly and conspicuously disclose to consumer in any offer for additional credit monitoring services or identity theft prevention and mitigation services that person offers for fee that person will charge consumer fee.
Prohibits consumer reporting agency from charging consumer fee or collecting from consumer money or item of value for placing, temporarily lifting or removing security freeze on consumer's consumer report, creating or deleting protective record, placing or removing security freeze on protective record or replacing lost personal identification number or password.
Modifies standards for safeguarding personal information.
Punishes violation of Act under Unlawful Trade Practices Act.
Takes effect on 91st day following adjournment sine die.
Oregon Legislative Assembly - Public Testimony Registration Form
You are registering to speak about:
HB 4147 House Committee On Rules
Registration Instructions / Language Access Services Information
Submit the form below to testify or comment either in person or remotely by video or phone. After completing the required fields (*), click the “Submit Registration to Testify” button.
Email address and phone number are required for administrative purposes and will not be posted to OLIS. Your phone number will be displayed on the livestream of the committee meeting if you testify by phone.
Registration ends 30 minutes prior to the start of the meeting. After that time, the registration system will close.
After registering and seeing a confirmation screen, you will receive an email with meeting details. If you do not receive a confirmation email, check your email spam folder.
Registration does not guarantee that you will have an opportunity to speak; the chair may determine that time for public testimony will be limited. Committee meetings are sometimes cancelled or rescheduled. You can receive email updates on selected bills or committee agendas by signing up for Capitol e-Subscribe.
If you would like to provide written testimony to the committee, see instructions to submit written testimony here.
To request spoken language interpretation, American Sign Language (ASL) interpretation, or Communication Access Realtime Translation (CART) services, please email languageaccess@oregonlegislature.gov or call 503-986-1538 at least 3 days in advance.
Para solicitar servicios de interpretación de lenguaje hablado, interpretación de lenguaje de señas americano (ASL) o traducción en tiempo real de acceso a la comunicación (CART), envíe un correo electrónico a languageaccess@oregonlegislature.gov o llame al 503-986-1538 con 3 dias de anticipación.
Confidential - Administrative Use Only
Will you travel more than 100 miles to this meeting to testify?
You Have Successfully Registered to Testify
Testimony Details:
You will receive an email soon with meeting details. If you registered to testify remotely, the
email will include a link or phone number to join the committee meeting.
If you do not receive a confirmation within 24 hours, have any questions, or need to cancel your registration,
please call 1-833-588-4500 or email the committee assistant listed on the committee page on OLIS.
Committee meetings are sometimes canceled or rescheduled. If you register to testify and the meeting is
rescheduled, you will need to register for the new meeting date. To receive email updates on selected
bills or committee agendas, sign up for Capitol E-Subscribe.
Measure Not Scheduled for Public Testimony
Thank you for your interest in providing public testimony on measure .
Either this measure is not currently scheduled for a public hearing, or the deadline to register to testify
or to submit written testimony has passed.
For questions about the legislature, legislative process, or other government agencies, please email
help.leg@oregonlegislature.gov or call 1-800-332-2313.
Measure Not Scheduled for Public Testimony
Thank you for your interest in providing written testimony on measure .
Either this measure is not currently scheduled for a public hearing, or the deadline to register to testify
or to submit written testimony has passed.
For questions about the legislature, legislative process, or other government agencies, please email
help.leg@oregonlegislature.gov or call 1-800-332-2313.