Misrepresentation in privacy policies (unlawful trade practice)
ORS 646.607(12)
Other
Makes it an unlawful trade practice to handle consumer information in a way that is materially inconsistent with what a business says in a website privacy statement or consumer agreement. It works as Oregon's enforcement hook for privacy promises rather than requiring any particular policy.
- Where
- Oregon
- Citation
- ORS 646.607(12)
- Status
- In force
- In force since
- 2016-01-01
- Enforced by
- Oregon Attorney General and district attorneys (ORS 646.632)
- People can sue
- No
- Penalties
- Injunction and civil penalties up to $25,000 per willful violation (ORS 646.642(3)).
- Applies to
- Any person that, in the course of business, publishes a statement on its business website or in a consumer agreement about how it will use, disclose, collect, keep, delete or dispose of consumer information
What a privacy notice must say
- Handle consumer information consistently with any published website or consumer-agreement statement about its use, disclosure, collection, retention, deletion or disposal.ORS 646.607(12)
Sources
- Official text
- ORS 646.607 (ORS chapter 646, 2025 edition)
- 2015 Or. Laws ch. 357 (SB 601), effective 2016-01-01
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Research reference, not legal advice.