Bill > HB3875

This bill amends Oregon Revised Statutes (ORS) 646A.572 to expand the scope of personal data privacy protections, specifically targeting motor vehicle manufacturers. Previously, the law applied to businesses processing personal data of 100,000 or more consumers, or 25,000 consumers while deriving 25% or more of annual revenue from selling personal data. The new provision explicitly requires motor vehicle manufacturers and their affiliates to comply with personal data protection regulations when controlling or processing any personal data obtained from a consumer's use of a motor vehicle, regardless of the previous numerical thresholds. The bill maintains existing exemptions for various types of data and organizations, such as public bodies, health information, and certain research activities. It also preserves provisions that allow data processing for specific purposes like complying with legal requirements, preventing fraud, protecting safety, and performing internal operations reasonably aligned with consumer expectations. The amendment aims to ensure more comprehensive data privacy protections in the automotive industry by closing potential regulatory gaps and providing clearer guidelines for how personal data collected through vehicle usage can be handled.

Business and Industry

https://olis.oregonlegislature.gov/liz/2025R1/Measures/Overview/HB3875