Oregon Governor Kate Brown signed a bill last month toughening the state’s already stringent data breach notification law, which will take effect on June 2, 2018. The most significant change for companies to be aware of is the requirement that affected consumers be notified no later than 45 days following discovery of a breach. Additionally, if a company offers free credit monitoring or identity theft protection services to the affected consumers, the company may not require the consumers to provide a credit or debit card number in order to receive such services.
Home > State Law Articles > Oregon > General (OR) > Oregon Enacts Tougher Data Breach Notification Law