5 Points. Unanimous Data Security Bill Post- Equifax.

Oregon’s SB 1551 (2018)  will require:

• notification to consumers of a data breach within 45 days unless it could hinder law enforcement
• if more than 250 Oregonians are affected, then notice must also go to the state Attorney General
• a violation triggers Deceptive Trade Practices Act 
  • this means class action lawsuits
  • this also means big fines
• no fees for credit freezes or thaws
• prohibits ‘ “upselling” by breached companies or third-party contractors when they offer people free credit monitoring or other damage-­mitigating services”

Register Guard | Oregon Senate approves new consumer protections after Equifax data breach