Connected-device reasonable security
Enacted in force
Jurisdiction
Oregon [source]
Applies to
Manufacturers of connected devices sold or offered for sale in Oregon, subject to the statutory definitions and exclusions. [source]
Penalty
Enforced as an unlawful trade practice; no fixed numeric civil penalty is specified in the retrieved device-security provision. [source]
Detail review
Accepted record facts reviewed
Nov 13, 2026
Fields requiring verification
- enforcement date: Unverified — No distinct enforcement-start date was established. Primary source
In plain English
- Manufacturers of connected devices sold or offered for sale in Oregon, subject to the statutory definitions and exclusions. Primary source
- Equip a covered device with reasonable security appropriate to its nature, function and collected or transmitted information. Primary source
- Protect the device and its stored information against unauthorized access, destruction, use, modification or disclosure. Primary source
- Where authentication outside a local-area network is possible, use a unique preprogrammed password or require the user to create a new means of authentication before first access. Primary source
Dates and phased obligations
2020-01-01 Primary source
· operative
2020-01-01 Primary source
Questions from this record
Who does HB2395 (2019); ORS646A.813 cover?
Manufacturers of connected devices sold or offered for sale in Oregon, subject to the statutory definitions and exclusions. Primary source
What is the law’s status?
Enacted / in force Primary source
What date does this record track?
2020-01-01 Primary source
Has this record been verified?
This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source
Primary sources
- Oregon Legislature,2019ch193 enrolled HB2395Connected-device duties and2020-01-01 effective clause
- Oregon Legislature, ORS646A§646A.813
Verification history
Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.
Compare the tracked rulesDates, coverage, and sources in one quarterly file.
View the matrix