Senate Bill 619 has been passed in Oregon, applying to any business that does business in the state and controls or processes the personal information of at least 100,000 Oregon residents or at least 25,000 Oregon residents while deriving at least 25% of its revenue from the sale of personal information.
