Oregon’s recent amendment to its comprehensive privacy statute extends the statutory cure period to July 1, 2026, but this extension is limited to certain controllers, specifically noncommercial educational broadcast stations that receive funding from the Corporation for Public Broadcasting and distribute journalism content without cost. Additionally, the amendment introduces a new criminal offense for the unlawful disclosure of personal information with intent to harm, including disclosing sensitive data such as Social Security numbers or photographs of a person’s child.
