ComplyRoom US REGULATORY TRACKERGet deadline alerts
AI & Privacy/Oregon/HB2052 (2023); ORS646A.593

Oregon data broker registration

Enacted in force

Jurisdiction
Oregon [source]
Applies to
Businesses collecting and selling or licensing brokered personal data of Oregon residents, subject to the act’s direct-relationship, FCRA, GLBA and other exclusions. [source]
Penalty
Civil penalty up to $500 per violation or continuing-violation day, capped at $10,000 per calendar year under ORS646A.593. [source]
Detail review
Accepted record facts reviewed
Nov 13, 2026

Fields requiring verification

In plain English

Dates and phased obligations

2024-01-01 Primary source

· operative
2024-01-01 Primary source

The act has an emergency clause, but the business registration provisions become operative2024-01-01; no unsupported signature date is assigned as the legal-effective date. Source and qualifications

Questions from this record

Who does HB2052 (2023); ORS646A.593 cover?

Businesses collecting and selling or licensing brokered personal data of Oregon residents, subject to the act’s direct-relationship, FCRA, GLBA and other exclusions. Primary source

What is the law’s status?

Enacted / in force Primary source

What date does this record track?

2024-01-01 Primary source

Has this record been verified?

This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source

Primary sources

Verification history

Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.

Compare the tracked rulesDates, coverage, and sources in one quarterly file.
View the matrix