Oregon Takes Steps to Protect Personal Data from Federal Immigration Authorities
A newly enacted law in Oregon aims to empower state officials to terminate contracts with data brokers that acquire personal information about Oregonians and share it with federal immigration authorities. Senate Bill 1587, effective last month, was initially intended to significantly curtail the use of data collected by private brokers that could impact civil law, encompassing immigration and family-related matters.
Regulatory Changes for Data Brokers
As part of the new legislation, state law already prohibits state authorities from assisting federal immigration enforcement. Moreover, starting in 2024, data brokers operating within Oregon will be required to register with state regulators. As of July, over 300 data brokers have completed this registration process. These brokers often include online people-search platforms and consumer behavior analysts that gather individual data to sell to various entities, including law enforcement agencies at all levels.
Concerns from Industry Stakeholders
However, the original proposal raised concerns among industry groups and lawmakers regarding its potential impact on the civil court system during a brief legislative session. Many were particularly focused on the need to address the aggressive deportation practices of the Trump administration. This context led Senator Wilnes Bay Campos (D-Aloha), the bill’s principal author, to revise his approach.
New Focus on Data Broker Compliance
The revised state law now primarily aims to restrict state agencies from divulging personal information to data brokers that do not provide assurances against disclosing data to the federal government for immigration-related enforcement. This allows Oregon state agencies to decline offers from data brokers if they have a “reasonable belief” that those brokers have provided “material misrepresentations, deceptions, or omissions.”
Future Legislative Plans
While Campos’s office announced that he would not be available for a press conference this week, they indicated plans for more comprehensive legislation in the coming year. According to Campos, violations of the new law will be subject to standard contract terms, which could include contract termination and loss of state business.
Stakeholder Input and Regulatory Oversight
Despite the positive reception to the new law, details remain unclear regarding enforcement. Campos’s office has yet to delineate how state regulators will identify violations or how individual Oregonians can seek remedy if they discover that their information was shared in violation of this legislation. For reference, the Oregon Criminal Justice Commission stated earlier this year that it had not investigated any possible sanctuary law violations linked to state grants for local law enforcement agencies.
Enhancements to Data Privacy in Oregon
As the Trump administration’s stringent immigration policies have escalated, efforts to safeguard sensitive information have intensified in Oregon. Advocates like Oregon Consumer Justice have lauded the passage of this new law, which aligns with ongoing initiatives to enhance data privacy protections. Recent legislation has also included measures to prohibit the sale of precise location data for minors under the age of 16 and has facilitated universal opt-out options for Oregonians regarding the sharing of their data for targeted advertising.
