More Internet Law news More news in Oregon Find Internet Law lawyers in Oregon
In a significant move to bolster internet privacy rights, the state of Oregon has passed a new law aimed at safeguarding citizens' personal data in the digital realm. The legislation, officially known as the Oregon Internet Privacy Act, was passed by a unanimous vote in the state legislature and signed into law by Governor Kate Brown on November 29, 2025.The Oregon Internet Privacy Act mandates that internet service providers (ISPs) operating within the state must obtain explicit consent from customers before collecting or sharing their personal information. This includes details such as browsing history, app usage, device identifiers, and geolocation data. Additionally, ISPs are required to disclose how this data will be used and provide customers with the option to opt out of any data collection.Furthermore, the law prohibits ISPs from selling or otherwise monetizing consumers' personal data without their consent. Violations of the Oregon Internet Privacy Act could result in significant fines and penalties for ISPs, with potential legal action from affected consumers.Governor Kate Brown hailed the new law as a crucial step towards protecting Oregonians' privacy in an increasingly digital and data-driven world. "With the passage of the Oregon Internet Privacy Act, we are sending a clear message that the privacy and security of our citizens' personal data are a top priority," said Governor Brown in a statement.The law also received widespread support from privacy advocates and consumer rights groups, who praised Oregon for taking proactive measures to address growing concerns about data privacy and online surveillance. "This legislation sets a precedent for other states to follow in protecting individuals' digital rights and holding ISPs accountable for their handling of personal data," said a spokesperson for the Oregon Consumer Rights Coalition.The Oregon Internet Privacy Act is set to go into effect on January 1, 2026, giving ISPs a grace period to update their practices and ensure compliance with the new regulations. Oregon joins a handful of other states, including California and Illinois, in enacting comprehensive internet privacy laws to safeguard residents' personal information in the digital age.