Disclaimer: This page provides general informational summaries only and does not constitute legal advice. AI-generated content may contain errors. Always consult a qualified attorney for guidance specific to your situation.
Read full disclaimer →
AI Summary
HB3899 lowers thresholds for data processing regulations and prohibits the use of sensitive data for targeted advertising and profiling.
Business Impact
If you process consumer personal data in Oregon, you must comply with new regulations or face penalties for violations.
What do these statuses mean? ▼
Introduced
— Filed in the legislature; not yet heard in committee
In Committee
— Assigned to and being reviewed by a legislative committee
Passed
— Approved by one or both chambers; awaiting further action
Signed / Enacted
— Signed into law by the governor; may or may not be in effect yet
Dead / Vetoed
— Vetoed, failed to pass, or session expired without action
Unknown
— Status data not yet available or awaiting classification
Affected Industries
What This Means
HB3899 introduces significant changes to the regulation of consumer personal data in Oregon. It lowers the thresholds for compliance and imposes strict prohibitions on the processing of sensitive data for targeted advertising and profiling. Businesses that handle consumer data must be aware of these changes.
Key Provisions
- Lowers thresholds for data processing regulations.
- Prohibits processing sensitive data for targeted advertising.
- Bans the sale of sensitive data.
Latest Legislative Action
In committee upon adjournment.
Bill Sponsors (showing 5 of 19)
| Name | Role | District |
|---|---|---|
| Anthony Broadman D | Sponsor | SD-027 |
| April Dobson D | Sponsor | HD-039 |
| Courtney Neron Misslin D | Sponsor | SD-013 |
| Dacia Grayber D | Sponsor | HD-028 |
| David Gomberg D | Sponsor | HD-010 |
Amendments (1)
House Committee On Commerce and Consumer Protection Amendment #-6
Pending
2025-04-03
Compliance Checklist
Assess data processing practices for compliance with new regulations
Who: Data controllers processing consumer personal data
Penalty: Potential penalties for non-compliance
Who: Data controllers processing consumer personal data
Penalty: Potential penalties for non-compliance
Cease processing sensitive data for targeted advertising
Who: Data controllers
Penalty: Potential penalties for non-compliance
Who: Data controllers
Penalty: Potential penalties for non-compliance
Full Legal Analysis
HB3899 modifies existing laws regarding the processing of consumer personal data in Oregon. It lowers the thresholds above which data controllers are subject to regulation, meaning more businesses will need to comply with these laws. The bill specifically prohibits controllers from processing sensitive data for targeted advertising or profiling that leads to significant legal effects. Additionally, it bans the sale of sensitive data altogether. Businesses must assess their data processing practices to ensure compliance with these new requirements. This bill reflects a growing trend towards stricter data protection measures.
Official Source
Official Bill Text
View HB3899 on official legislature website →
Affected Industries
More Oregon AI Legislation
SB 1546
Relating to artificial intelligence companions.
High
SB1516
Relating to public safety; and declaring an emergency.
Medium
HB4017
Relating to registration of business entities that qualify as data br…
High
HB2052
Relating to registration of business entities that qualify as data br…
High
HB4103
Relating to artificial intelligence.
Low
SB1571
Relating to the use of artificial intelligence in campaign communicat…
High
View All OR Laws →
More Oregon AI Laws
Browse all published AI bills and regulations for Oregon.