Oregon Consumer Information Protection Act: data security, disposal and SSN protection

Requires covered entities and vendors to keep reasonable administrative, technical and physical safeguards for personal information, including secure disposal, with safe harbors for GLBA or HIPAA compliance and a scaled standard for small businesses. It also restricts printing, posting and careless disposal of Social Security numbers.