Oregon 2018 Regular Session Status: In Committee 10 D cosponsors

HB 4147 — Relating to data security; prescribing an effective date.

Last action — In committee upon adjournment.

Track this bill free

No card. One bill, free forever — alerts when it moves.

  1. ✓
    Introduced
  2. 2
    In Committee
  3. 3
    Passed House
  4. 4
    Passed Senate
  5. 5
    To Executive
  6. 6
    Enacted

This bill died with 2018 Regular Session. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.

This bill is no longer active — its legislative session has ended, so there is no live prognosis. It would have to be reintroduced in the current session to move again.

Summary

<i>Prohibits consumer reporting agencies from charging certain fees related to security freezes on consumer reports or protective records.</i>] <i>Requires certain persons who own, license, possess or have access to personal consumer information to give notice of breach of data security to certain financial institutions and merchant services providers. Requires financial institutions and merchant services providers that discover or receive notice of data breach of another person to notify other person.</i>] <i>Requires notice of data breach to be given within 45 days of discovery of breach, unless such notice will impede criminal investigation.</i>] <i>Prohibits person providing free credit monitoring in connection with data breach from offering additional services, unless such services are free, or from conditioning free credit monitoring on acceptance of other services.</i>] <i>Modifies standards for safeguarding of personal information.</i>] <i>Permits person to initiate civil action on behalf of state for violations of Oregon Consumer Identity Theft Protection Act. Provides that person may receive award of no greater than 25 percent of monetary recovery. Provides that state may intervene and proceed with such action. Provides that when person or state prevails in such action, court shall award reasonable attorney fees and costs.</i>] <b>Requires person that owns, licenses, has control over or has access to personal information and was subject to breach of security to notify consumer to whom personal information pertains and, if number of consumers to whom person must send notice exceeds 250, to Attorney General. Requires person to give notice in most expeditious manner possible, without unreasonable delay, but not later than 45 days after discovering or receiving notice of breach of security. Requires person, in providing notice, to determine sufficient contact information for notice recipients, to determine scope of breach of security and to restore integrity, security and confidentiality of personal information. <b>Provides that if person must notify consumer of breach of security and with notice person offers credit monitoring services or identity theft prevention and mitigation services without charge to consumer, person may not condition provision of services on consumer's providing person with credit card or debit card number or consumer's acceptance of any other service person offers for fee. Requires person to separately, distinctly, clearly and conspicuously disclose to consumer in any offer for additional credit monitoring services or identity theft prevention and mitigation services that person offers for fee that person will charge consumer fee. <b>Prohibits consumer reporting agency from charging consumer fee or collecting from consumer money or item of value for placing, temporarily lifting or removing security freeze on consumer's consumer report, creating or deleting protective record, placing or removing security freeze on protective record or replacing lost personal identification number or password. <b>Modifies standards for safeguarding personal information. <b>Punishes violation of Act under Unlawful Trade Practices Act.</b> Takes effect on 91st day following adjournment sine die.

Bill Text

We don't have the full text on file for this bill yet.

Read HB 4147 on the official Oregon source →

Action History

  1. In committee upon adjournment.

  2. Referred to Rules by order of Speaker.

  3. Without recommendation as to passage, with amendments, be printed A-Engrossed, and be referred to Rules.

  4. Work Session held.

  5. Public Hearing held.

  6. Referred to Business and Labor.

  7. First reading. Referred to Speaker's desk.

  8. Presession Released to the Public.

Sponsors

Sponsorship breakdown

Export CSV (upgrade) →

3 sponsors · 18 co-sponsors · 69 not signed on · 5 voted No

Sponsors (3)

Co-sponsors (18)

Not signed on (69)

69 members have not signed on to this bill.

Show all 69 →

"Not signed on" means a member has not sponsored or co-sponsored this bill — it does not imply opposition. Members flagged Voted No have a recorded No vote on this bill.

Whip count is in markup. Polling the chamber and every recorded vote this session. Only the first open is slow. It’s instant for you after this. Calling the roll · Tallying · Engrossing

Votes

Subjects

public-safety technology
Cross-referencing the record. Reading this bill against every other bill in the corpus by meaning, not keywords. Only the first open is slow. It’s instant for you after this. Matching · Ranking · Engrossing

Frequently asked questions

What does HB 4147 do?
<i>Prohibits consumer reporting agencies from charging certain fees related to security freezes on consumer reports or protective records.</i>] <i>Requires certain persons who own, license, possess or have access to personal consumer information to give notice of breach of data security to certain financial institutions and merchant services providers. Requires financial institutions and merchant services providers that discover or receive notice of data breach of another person to notify other person.</i>] <i>Requires notice of data breach to be given within 45 days of discovery of breach, unless such notice will impede criminal investigation.</i>] <i>Prohibits person providing free credit monitoring in connection with data breach from offering additional services, unless such services are free, or from conditioning free credit monitoring on acceptance of other services.</i>] <i>Modifies standards for safeguarding of personal information.</i>] <i>Permits person to initiate civil action on behalf of state for violations of Oregon Consumer Identity Theft Protection Act. Provides that person may receive award of no greater than 25 percent of monetary recovery. Provides that state may intervene and proceed with such action. Provides that when person or state prevails in such action, court shall award reasonable attorney fees and costs.</i>] <b>Requires person that owns, licenses, has control over or has access to personal information and was subject to breach of security to notify consumer to whom personal information pertains and, if number of consumers to whom person must send notice exceeds 250, to Attorney General. Requires person to give notice in most expeditious manner possible, without unreasonable delay, but not later than 45 days after discovering or receiving notice of breach of security. Requires person, in providing notice, to determine sufficient contact information for notice recipients, to determine scope of breach of security and to restore integrity, security and confidentiality of personal information. <b>Provides that if person must notify consumer of breach of security and with notice person offers credit monitoring services or identity theft prevention and mitigation services without charge to consumer, person may not condition provision of services on consumer's providing person with credit card or debit card number or consumer's acceptance of any other service person offers for fee. Requires person to separately, distinctly, clearly and conspicuously disclose to consumer in any offer for additional credit monitoring services or identity theft prevention and mitigation services that person offers for fee that person will charge consumer fee. <b>Prohibits consumer reporting agency from charging consumer fee or collecting from consumer money or item of value for placing, temporarily lifting or removing security freeze on consumer's consumer report, creating or deleting protective record, placing or removing security freeze on protective record or replacing lost personal identification number or password. <b>Modifies standards for safeguarding personal information. <b>Punishes violation of Act under Unlawful Trade Practices Act.</b> Takes effect on 91st day following adjournment sine die.
Who sponsors HB 4147?
HB 4147 is sponsored by Floyd Prozanski (Democrat), Paul Evans (Democrat), Pam Marsh (Democrat), David Gomberg (Democrat), Janeen Sollman (Democrat), Susan McLain (Democrat), Rob Nosse (Democrat), Ken Helm (Democrat), John Lively (Democrat), Tawna Sanchez (Democrat), Alissa Keny-Guyer, Barbara Smith Warner, Paul Holvey, Mitch Greenlick, Teresa Alonso Leon, Brad Witt, Jeff Reardon, Andrea Salinas, Margaret Doherty, Jennifer Williamson, and Diego Hernandez.
What is the current status of HB 4147?
This bill died with 2018 Regular Session. It reached “In Committee” and never advanced before the session ended, so it can no longer move — a new version would have to be reintroduced in the current session.
Where can I track HB 4147?
Track HB 4147 free on One Click Politics — get push/email alerts when it moves.

Make your voice heard on HB 4147

Find the representatives who decide this bill and tell them where you stand — for yourself, or mobilize your whole list in one click with One Click Politics advocacy software.

Find my representatives → Run a campaign

Stay ahead of HB 4147

Last checked for changes 3 months ago · updated continuously

One Click Politics tracks every bill in Congress and all 50 states.

Track this bill →