Commentary Addressing Risks and Opportunities Through the Lifecycle of Data, Technology, Advertising and Innovation

Data Counsel

Home | Data Counsel

<img class="alignright size-medium wp-image-5024" src="https://dataprivacymonitor.bakerhostetlerblogs.com/wp-content/uploads/sites/5/2017/07/DataSecurity-300x225.jpg" alt="" width="300" height="225" />Effective January 1, 2018, Oregon will join Pennsylvania and Nebraska in expanding its definition of deceptive trade practices to explicitly include a material misstatement regarding the use of personal information. <a href="https://olis.leg.state.or.us/liz/2017R1/Downloads/MeasureDocument/HB2090">House Bill 2090</a> applies to statements “publishe[d] on a website … or in a consumer agreement related to a consumer transaction.” Like the other states’ laws, Oregon’s law does not include a private right of action. However, the Oregon law is significantly broader than <a href="http://www.legis.state.pa.us/cfdocs/legis/LI/consCheck.cfm?txtType=HTM&amp;ttl=18&amp;div=0&amp;chpt=41&amp;sctn=7&amp;subsctn=0">Pennsylvania’s</a> and <a href="http://nebraskalegislature.gov/laws/statutes.php?statute=87-302">Nebraska’s</a> laws in the following respects:
<ul>
 	<li>Oregon’s law does not include a mental state requirement. Both Pennsylvania’s and Nebraska’s laws require that the misrepresentation be made “knowingly.”</li>
 	<li>Oregon’s law applies to any “information that the person requests, requires or receives from a consumer” as opposed to limiting coverage to “personal information.”</li>
 	<li>Oregon’s law applies to representations regarding how a person will “use, disclose, collect, maintain, delete or dispose of information,” whereas the Pennsylvania and Nebraska laws apply only to “use.”</li>
</ul>
The following chart provides additional details regarding the similarities and differences between the three laws:

<a href="https://dataprivacymonitor.bakerhostetlerblogs.com/wp-content/uploads/sites/5/2017/07/dpm2.jpg"><img class="aligncenter size-full wp-image-5021" src="https://dataprivacymonitor.bakerhostetlerblogs.com/wp-content/uploads/sites/5/2017/07/dpm2.jpg" alt="" width="659" height="808" /></a>

&nbsp;

Oregon Expands Deceptive Trade Practices Act to Include Misrepresentations About PI Usage