- data breach defined in new Orgegon law as:
- “an unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information that a person maintains.”
- personal information that triggers the notification statute
- Social Security number;
- Driver license number or state identification card number issued by the Department of Transportation;
- Passport number or other United States issued identification number; or
- Financial account number, credit or debit card number, in combination with any required security code, access code or password that would permit access to a consumer’s financial account
- Statute only applies to unencyoted information
- law enforcement can delay notification if it would impede an investigation
- Statute does not apply to medical or health insurance information
Health Security | Oregon Data Breach Notification Law Goes Into Effect