Oregon 2025 Regular Session

Oregon House Bill HB3899

Introduced
2/27/25  

Caption

Relating to requirements that apply to persons that process consumer personal data.

Impact

The bill's primary impact is on businesses that process consumer personal data within the state. By lowering the thresholds for compliance, more entities will be subject to governance under this legislation, meaning they must adapt their data handling practices in accordance with the stricter requirements. This includes affirmative consent for the processing of sensitive data and maintaining clear privacy notices for consumers. Overall, HB3899 represents a substantial strengthening of consumer protections related to personal data in Oregon.

Summary

House Bill 3899 addresses new regulations concerning the processing of personal data by businesses operating in Oregon. This bill lowers the thresholds at which entities are required to comply with data protection regulations and explicitly prohibits the processing of sensitive data for targeted advertising, profiling, or other significant decision-making purposes. The aim is to enhance consumer privacy and ensure that businesses handle personal data with greater care and transparency.

Sentiment

The sentiment surrounding HB3899 largely varies among stakeholders. Proponents of the bill, primarily consumer advocacy groups and privacy advocates, view it positively as necessary for enhancing the protection of consumer data and addressing growing concerns about privacy in the digital age. Conversely, industry representatives have voiced reluctance, arguing that such regulation may impose undue burdens on businesses, particularly smaller entities that may struggle to comply with new requirements.

Contention

Notable points of contention relate to the bill's implications for businesses regarding compliance costs and operational adjustments. Opponents argue that the restrictions on processing sensitive data could hinder targeted marketing initiatives, potentially affecting revenue streams for businesses reliant on such practices. Additionally, concerns arise over how the bill defines sensitive data and its broadened applicability to a wide range of businesses, leading to fears about potential overreach and the operational feasibility of compliance.

Companion Bills

No companion bills found.

Previously Filed As

OR SB619

Relating to protections for the personal data of consumers.

OR SB1062

Relating to consumers' personally identifiable information.

OR HB2759

Relating to penalties that apply to persons that assist in violations of laws that regulate calls to telephone subscribers; and prescribing an effective date.

OR SB857

Relating to an emergency medical services personnel licensure compact; prescribing an effective date.

OR SB1596

Relating to a right to repair consumer electronic equipment.

OR SB192

Relating to prescription drugs; and prescribing an effective date.

OR SB404

Relating to prescription drugs; prescribing an effective date.

OR SB824

Relating to persons purporting to provide certain treatment services; prescribing an effective date.

OR HB3444

Relating to health care; prescribing an effective date.

OR HB3013

Relating to pharmacy benefits; declaring an emergency.

Similar Bills

OR SB619

Relating to protections for the personal data of consumers.

OR HB2008

Relating to consumer protection.

VT S0093

An act relating to consumer data privacy

VT S0071

An act relating to consumer data privacy and online surveillance

VT H0208

An act relating to consumer data privacy and online surveillance

VT S0269

An act relating to enhancing consumer privacy

OR HB3875

Relating to personal data obtained from a consumer's use of a motor vehicle; and prescribing an effective date.

AR SB258

To Create The Arkansas Digital Responsibility, Safety, And Trust Act.