United States of America: Introduced Act Establishing a Data Broker Registry (HB 2052)

On 9 January 2023, an Act Establishing a Data Broker Registry (HB 2052) was introduced in the Oregon House of Representatives. Under the Act, any data broker doing business in Oregon must register with the Department of Consumer and Business Services. Covered by the Act are data brokers, meaning any entity that collects, sells or licenses personal information to third parties. This register would be public and contain both contact information as well as information about the privacy and data collection practices of the registered data brokers. The data brokers must also specify if and how consumers can opt out of these practices. If a data broker does not comply with the registration requirement, a civil penalty of USD 500 per day is imposed, which cannot exceed USD 10'000 per year. If adopted, the Act enters into effect on 1 January 2024.