{"id":210,"date":"2015-06-25T20:56:00","date_gmt":"2015-06-25T20:56:00","guid":{"rendered":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/2015\/06\/25\/lege-trend-6-ways-the-home-of-the-ducks-strengthens-data-breach-law\/"},"modified":"2015-06-25T20:56:00","modified_gmt":"2015-06-25T20:56:00","slug":"lege-trend-6-ways-the-home-of-the-ducks-strengthens-data-breach-law","status":"publish","type":"post","link":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/lege-trend-6-ways-the-home-of-the-ducks-strengthens-data-breach-law\/","title":{"rendered":"Lege trend: 6 Ways the Home of the Ducks Strengthens Data Breach Law"},"content":{"rendered":"<ul>\n<li>&#8220;Expands the statute\u2019s definition of \u201cpersonal information\u201d to include a resident\u2019s biometric or medial information;<\/li>\n<li>Requires entities or persons that own or license consumer personal information\u00a0to notify the Oregon Attorney General of a data breach if the entity must notify more than 250 residents;<\/li>\n<li>Raises the threshold for notifying Oregon consumers to a more generous \u201cunlikely to suffer harm\u201d standard;<\/li>\n<li>Lowers the threshold for reporting to consumer report agencies (CRAs) by requiring notice to CRAs whenever a breach affects more than 1,000 residents;<\/li>\n<li>Exempts covered entities under the Health Insurance Portability and Accountability Act (HIPAA) from compliance, so long as a copy of the notice sent to either the entity\u2019s primary functional regulator or to state residents is sent to the Attorney General; and<\/li>\n<li>Allows the Attorney General to bring action against entities that violate the data breach statute, pursuant to Oregon\u2019s\u00a0<a href=\"https:\/\/www.oregonlegislature.gov\/bills_laws\/ors\/ors646.html\" style=\"border:0px solid rgb(204,204,204);text-decoration:none;color:rgb(0,83,153);\" target=\"_blank\" rel=\"noopener noreferrer\">Unlawful Trade Practices Act<\/a>\u00a0(Ore. Rev. Stat. \u00a7 646.607).&#8221;<\/li>\n<\/ul>\n<p><a href=\"http:\/\/www.jdsupra.com\/legalnews\/oregon-expands-data-breach-law-75694\/\">JD Supra<\/a>\u00a0| Privacy &amp; Security Law<\/p>\n","protected":false},"excerpt":{"rendered":"<ul>\n<li>&#8220;Expands the statute\u2019s definition of \u201cpersonal information\u201d to include a resident\u2019s biometric or medial information;<\/li>\n<li>Requires entities or persons that own or license consumer personal information\u00a0to notify the Oregon Attorney General of a data breach if the entity must notify more than 250 residents;<\/li>\n<li>Raises the threshold for notifying Oregon consumers to a more generous \u201cunlikely to suffer harm\u201d standard;<\/li>\n<li>Lowers the threshold for reporting to consumer report agencies (CRAs)&#8230;<\/li>\n<\/ul>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2,3,4],"tags":[],"class_list":["post-210","post","type-post","status-publish","format-standard","hentry","category-data-privacy","category-legislative-trend","category-retail-data-breach","entry"],"_links":{"self":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/comments?post=210"}],"version-history":[{"count":0,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/210\/revisions"}],"wp:attachment":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/media?parent=210"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/categories?post=210"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/tags?post=210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}