Oregon insurance information and privacy protection law
ORS 746.600-746.690
Financial · Health · Credit reporting
Oregon's version of the NAIC insurance privacy model, combined with GLBA-style notice rules. It requires privacy notices, limits pretext interviews and disclosures, gives consumers rights to access and correct recorded personal information and to learn the reasons for adverse underwriting decisions, and limits use of credit history and insurance scores in personal lines.
- Where
- Oregon
- Citation
- ORS 746.600 to 746.690
- Status
- In force
- Enforced by
- Director of the Department of Consumer and Business Services (Division of Financial Regulation) (ORS 746.670); limited private remedies (ORS 746.680)
- People can sue
- Limited
- Penalties
- Equitable relief for access, correction and adverse-decision violations; actual damages for unlawful disclosures under ORS 746.665 or health insurer misuse under ORS 746.607(1)-(2); attorney fees; 2-year limit (ORS 746.680). Administrative enforcement by DCBS.
- Applies to
- Insurers, insurance producers and insurance-support organizations handling personal information of Oregon residents in insurance transactions (ORS 746.610)
- Health insurers, for PHI use and disclosure (ORS 746.606-746.609)
What a privacy notice must say
- Give a clear and conspicuous notice of personal information practices when a customer relationship begins and before disclosures under ORS 746.665.ORS 746.620(1)
Rights it gives people
- Individuals may request access to recorded personal information; respond within 30 business days, including the identity of recipients of the information.ORS 746.640(1)
- Individuals may request correction, amendment or deletion of recorded personal information.ORS 746.645
Practices it requires
- Health insurers may use or disclose PHI without authorization only for treatment, payment and operations or as law permits.ORS 746.607
- Pretext interviews are prohibited, and obtaining information under false pretenses is barred.ORS 746.615; 746.690
- Personal insurers may not cancel or nonrenew a policy in force over 60 days based on credit history or insurance score, and may use credit history to decline new coverage only with other substantive factors.ORS 746.661(1)(a)-(b)
Sources
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Unverified: Effective date and latest amendment not fetched.
Research reference, not legal advice.