Skip to content

Session Expired

Your session has expired. Please sign in again to continue where you left off.

Sign In Again

OR HB3936: Relating to the security of state assets; amending ORS 276A.340, 276A.344, 276A.346 and 276A.348.

Effective Jan 1, 2026 Oregon · 2025 session

Last verified Oct 12, 2026 · official bill text

HB3936 · where it stands

All steps complete
  1. Introduced Complete
  2. Passed first chamber Complete
  3. Passed both chambers Complete
  4. Enacted Complete
  5. Effective Since Jan 1, 2026
What do these statuses mean?
Introduced
Filed in the legislature; may be waiting for a committee hearing.
Passed a chamber
Approved by one or both chambers; awaiting further action.
Enacted
Signed into law, or became law without a signature or over a veto.
Effective date
The date the law says it takes effect. Once it has passed, the page shows "Effective" and the date. A court order can still block a law; if we know of one, the summary says so.
Dead / vetoed
Vetoed, failed, or the session ended without action.

In one paragraph

Oregon's HB 3936 (Chapter 396, Oregon Laws 2025) amends the state law that keeps products of covered vendors off state information technology assets (ORS 276A.340 to 276A.348). It adds a definition of artificial intelligence and makes any hardware, software or service that uses AI developed or owned by a covered vendor a covered product. Covered vendors include Ant Group, ByteDance, Huawei, Kaspersky, Tencent, ZTE and entities the State Chief Information Officer designates as national security threats. Covered products may not be installed on, downloaded to or used on state IT assets. Signed June 24, 2025; effective January 1, 2026.

Plain-English summary, written with AI assistance. The official text controls.

What it means for business

Vendors and contractors serving Oregon agencies cannot supply or use AI tools developed or owned by designated covered vendors on state IT assets.

Key provisions

  1. Defines artificial intelligence as a machine-based system that makes predictions, recommendations or decisions for human-defined objectives
  2. Covered product now includes any hardware, software or service using AI developed or owned by a covered vendor
  3. Covered vendors: Ant Group, ByteDance, Huawei, Kaspersky, Tencent, ZTE and others designated by the State Chief Information Officer
  4. Covered products barred from state information technology assets used by state agencies or contractors
  5. State CIO adopts rules and policies for designating covered vendors and implementation timelines

Latest legislative action

Jun 24, 2025. Governor signed June 24, 2025 (Chapter 396, Oregon Laws 2025); effective January 1, 2026

Sponsors

NameRoleDistrict
R Sponsor HD-031
D Sponsor HD-044

Roll call votes (showing 3 of 4)

S Senate Third Reading Jun 12, 2025

27 yea0 nay3 otherPassed

H House Third Reading May 14, 2025

52 yea0 nay7 otherPassed

H House Committee Do pass with amendments. (Printed A-Eng.) May 9, 2025

6 yea0 nayPassed

Amendments (2)

  • Joint Committee On Information Management and Technology Amendment #-1 Not adopted 2025-04-18
  • Joint Committee On Information Management and Technology Amendment #-1 Not adopted 2025-05-09

Topics and industries

Related topics

AI in Government

Affected industries

GovernmentTechnology

This page is general information, not legal advice. Summaries are AI-assisted and may contain errors; read the statute for the controlling text and talk to a lawyer about your situation. Full disclaimer · Report an error

Related AI laws in Oregon

All Oregon bills →
HB4153 Relating to artificial intelligence; and declaring an emergency. HB4103 Relating to artificial intelligence. HB3771 Relating to the regulation of artificial intelligence. HB2748 Relating to the use of nursing titles. HB2299 Relating to the unlawful dissemination of intimate images. SB1571 Relating to the use of artificial intelligence in campaign communications; decla

Same topic in other states

Montana SB397 Generally revise laws related to privacy and facial recognition technology Utah HB444 Data Privacy Amendments New Jersey AJR164 Establishes "New Jersey Advanced Autonomous Vehicle Task Force." Arizona HB2482 sexual assault kits; victim notification Maryland SB1068 Department of Information Technology - Evaluation and Development of a 3-1-1 Por Virginia HB553 Department of Corrections; language access and translation services for inmates.