Oregon Passes Landmark Digital Privacy Act With Bipartisan SupportThe Oregon legislature passed the Digital Privacy and Consumer Protection Act (DPCPA) in a 48-12 Senate vote and 78-22 House vote, making it the most comprehensive state privacy law in the nation. The law grants residents the right to access, delete, and port their personal data, bans the sale of location data without explicit opt-in consent, requires data breach notification within 48 hours (down from the current 90-day standard), and creates a dedicated privacy enforcement division within the state attorney general's office with a $6.5 million annual budget. Companies with revenue over $25 million or data on 100,000+ Oregon residents must comply by January 2027. The Oregon Technology Council, representing 2,800 companies, supported the final bill after amendments excluded small businesses. Governor Martinez is expected to sign the bill next week.
Oregon Statesman-Journal