Law / United States / 
Oregon
Oregon prohibition on printing, displaying or posting Social Security numbers
In force since .
A sensitive categories rule binding public and private bodies.
- Obligation class
- Prohibition
- Audit expectation
- none
As of .
What it requires
- Do not print a consumer's Social Security number on mail to the consumer that is material the consumer did not request, or on any documentation the consumer requested for a transaction or service, unless the number is redacted (ORS 646A.620(1)(a)).
- Do not print a consumer's Social Security number on any card the consumer needs to access products or services you provide (ORS 646A.620(1)(b)).
- Do not publicly post or publicly display a consumer's Social Security number, meaning communicate it or otherwise make it available to the public, unless it is redacted (ORS 646A.620(1)(c)).
These lines are LexLint's reading of the law's text, as of .
If you get it wrong
Penalty structure
ORS 646A.624(4): a person who violates ORS 646A.600 to 646A.628, or procures, aids or abets a violation, is subject to a penalty of not more than $1,000 for every violation, paid to the General Fund of the State Treasury. Every violation is a separate offense and each day of a continuing violation is a separate violation, but the maximum penalty for any occurrence does not exceed $500,000.
- Rule
- Per violation only
- As of
- Currency
- USD
- Fixed cap
- 500,000
- Per violation unit
- Violation
- Per violation amount
- 1,000
Who enforces it
Enforcement body
Director of the Department of Consumer and Business Services, who may issue an order to cease and desist from a violation of ORS 646A.600 to 646A.628 or require the person to pay compensation to injured consumers (ORS 646A.624(3)).
What this law does
ORS 646A.620(1) bars a person, except as otherwise specifically provided by law, from printing a consumer's Social Security number on unrequested mail or on documentation of a requested transaction or service unless it is redacted, from printing it on a card required to access products or services, and from publicly posting or displaying it unless it is redacted.
ORS 646A.620 does not prevent the collection, use or release of a Social Security number as required by state or federal law or court rule, or its use or printing for internal verification or administrative purposes or to enforce a judgment or court order. The history note of ORS 646A.620 lists section 11 of chapter 759, Oregon Laws 2007, and section 1 of chapter 254, Oregon Laws 2017.
Chapter 254, Oregon Laws 2017 (Senate Bill 769), relates to disposing of material that displays Social Security numbers and amends ORS 646A.620. A person who violates or who procures, aids or abets in the violation of ORS 646A.600 to 646A.628 is subject to a penalty of not more than $1,000 for every violation, and the maximum penalty for any occurrence does not exceed $500,000.
If the Director of the Department of Consumer and Business Services has reason to believe that a person is violating ORS 646A.600 to 646A.628, the director may issue a cease and desist order or require the person to pay compensation to injured consumers. ORS 646.607 lists a violation of a provision of ORS 646A.600 to 646A.628 among the unlawful trade practices.
A prosecuting attorney who has probable cause to believe that a person is engaging in an unlawful trade practice may bring suit in the name of the State of Oregon to restrain the practice. A court that finds a person willfully used a practice declared unlawful by ORS 646.607 may, on the prosecuting attorney's petition, set a civil penalty not exceeding $25,000 per violation.
When LexLint raises it
When your app profile says your app sends automated outreach, crawls the web, deploys a chatbot or trains models.