Bloomberg Law: Privacy & Data Security brings you single-source access to the expertise of Bloomberg Law’s privacy and data security editorial team, contributing practitioners,...
June 16 — Beginning in 2016, organizations that own or license the personal information of Oregon residents must notify the state's attorney general of data breaches affecting more than 250 consumers under a bill (S.B. 601) recently signed by Gov. Kate Brown (D).
The measure, signed June 10, amends the state's existing data breach notification law, the Oregon Consumer Identity Theft Protection Act, Or. Rev. Stat. § 646A.600, which took effect in 2007.
“The number of state breach notification laws that are being amended to provide for notification of a state attorney general about a breach in addition to affected individuals continues to increase,” Melissa Krasnow, a partner at Dorsey & Whitney LLP in Minneapolis, told Bloomberg BNA June 16. Including Oregon, 22 states plus Puerto Rico require notification to the attorney general in the event of a data breach, she said. Some attorney generals “have used breach notification as a basis to further investigate,” she added.
“Oregon SB 601 also contains an amendment to the Oregon securities procedures law to provide clarity regarding certain provisions,” she said.
Since President Barack Obama's federal breach notification proposal was unveiled in January, states are “constantly amending” their breach notification laws, Krasnow said.
In addition to expanding the notification requirements, the amended law expands the definition of “personal information” to include a consumer's biometric data, health insurance policy number in combination with another unique identifier and information about his or her medical history, mental or physical health or medical diagnosis or treatment.
The law also makes a violation of the Consumer Identity Theft Protection Act actionable by the state's attorney general under the Unlawful Trade Practices Act, according to a House Judiciary Committee summary on the bill.
In addition, the summary said, hospitals or health-care plans that are covered by the Health Insurance Portability and Accountability Act won't be subject to enforcement actions by the attorney general if they give notice of the breach to the attorney general.
The bill passed the Senate April 29 by a vote of 26 to 3, and the House May 29 by a vote of 54 to 2.
The effective date of the amendments is Jan. 1, 2016.
To contact the reporter on this story: Katie W. Johnson in Washington at firstname.lastname@example.org
To contact the editor responsible for this story: Barbara Yuill at email@example.com
S.B. 601, as enrolled, is available at https://olis.leg.state.or.us/liz/2015R1/Downloads/MeasureDocument/SB0601/Enrolled.
All Bloomberg BNA treatises are available on standing order, which ensures you will always receive the most current edition of the book or supplement of the title you have ordered from Bloomberg BNA’s book division. As soon as a new supplement or edition is published (usually annually) for a title you’ve previously purchased and requested to be placed on standing order, we’ll ship it to you to review for 30 days without any obligation. During this period, you can either (a) honor the invoice and receive a 5% discount (in addition to any other discounts you may qualify for) off the then-current price of the update, plus shipping and handling or (b) return the book(s), in which case, your invoice will be cancelled upon receipt of the book(s). Call us for a prepaid UPS label for your return. It’s as simple and easy as that. Most importantly, standing orders mean you will never have to worry about the timeliness of the information you’re relying on. And, you may discontinue standing orders at any time by contacting us at 1.800.960.1220 or by sending an email to firstname.lastname@example.org.
Put me on standing order at a 5% discount off list price of all future updates, in addition to any other discounts I may quality for. (Returnable within 30 days.)
Notify me when updates are available (No standing order will be created).
This Bloomberg BNA report is available on standing order, which ensures you will all receive the latest edition. This report is updated annually and we will send you the latest edition once it has been published. By signing up for standing order you will never have to worry about the timeliness of the information you need. And, you may discontinue standing orders at any time by contacting us at 1.800.372.1033, option 5, or by sending us an email to email@example.com.
Put me on standing order
Notify me when new releases are available (no standing order will be created)