Privacy Law Library

Public body disclosures to data brokers (immigration attestation)

SB 1587 (2026)

Data brokers · Government records

Bars Oregon public bodies from giving personally identifiable information to a data broker unless the broker first attests in writing that the data will not be sold or transferred to anyone who will use it to enforce federal immigration law. It binds data brokers indirectly, as a condition of receiving government data.

Where
Oregon
Citation
2026 Or. Laws ch. 96, sec. 1 (SB 1587)
Status
In force
In force since
2026-06-05
Enforced by
None specified in the act
People can sue
No
Penalties
No penalty specified; the act bars the disclosure absent an attestation.
Applies to
  • Oregon public bodies (ORS 174.109) disclosing personally identifiable information to data brokers as defined in ORS 646A.593

Practices it requires

  • A data broker must give a written attestation that the information will not be sold or transferred to an entity that will use it for federal immigration enforcement before a public body may disclose PII to it.2026 Or. Laws ch. 96, sec. 1(2)(a)
  • A public body must reject an attestation it reasonably believes contains material misrepresentations or omissions.2026 Or. Laws ch. 96, sec. 1(2)(b)

Other duties

  • Exceptions for disclosures required by public records law or court order, and for information available to the general public on the same terms.2026 Or. Laws ch. 96, sec. 1(3)

Sources

Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.

Unverified: Not yet compiled in ORS; final ORS section number not assigned in the 2025 edition.

Research reference, not legal advice.