Recent Amendments to Oregon’s Data Breach Law

Oregon recently amended its data breach notification statute, now called the “Oregon Consumer Information Protection Act.”  The amendments, which go into effect on January 1, 2020, include the following changes: Expanding the definition of “personal information” to include “[a] user name or other means of identifying a consumer for the purpose of permitting access to the… Continue reading Recent Amendments to Oregon’s Data Breach Law

SEC Announces $35 Million Penalty for Yahoo Breach

The Securities and Exchange Commission today announced that Altaba, formerly known as Yahoo! Inc., agreed to pay a $35 million penalty arising out of a December 2014 data breach that affected hundreds of millions of user accounts. The SEC found that Yahoo misled investors by failing to report the data breach to the public until… Continue reading SEC Announces $35 Million Penalty for Yahoo Breach

Oregon’s Data Breach Notification Law

If you do business in Oregon and own, maintain, or possess data about Oregon residents, you must comply with Oregon’s Consumer Identity Theft Protection Act (the “Act”). The Act requires the implementation of reasonable safeguards to protect the security, confidentiality, and integrity of personal information. Personal information is defined as: Social Security number, driver’s license… Continue reading Oregon’s Data Breach Notification Law