Committee hears wide-ranging proposals to tighten Oregon Consumer Privacy Act; debate centers on geolocation bans, youth protections and implementation timeline

The House Committee on Commerce and Consumer Protection held a public hearing March 18 on House Bill 3,899, a bill that would amend the Oregon Consumer Privacy Act (OCPA) to reduce thresholds that trigger regulation, prohibit sale of sensitive data including precise geolocation, and strengthen data-minimization requirements.

Representative Willie Choetzen, a sponsor of HB 3,899, told the committee the measure has three main goals: ban the private sale of precise geolocation data, prohibit the private sale of personal data for children 15 and younger, and tighten data-minimization rules so companies only retain data necessary to provide requested services. Choetzen said the bill’s forthcoming dash-1 amendment language has been shared with advocates and opponents and that the measure aims to close known gaps in the 2023 law.

Supporters, including Oregon Consumer Justice, Consumer Reports, the Electronic Privacy Information Center (EPIC), and PIRG, argued the marketplace for sensitive consumer information is causing tangible…