ComplyRoom US REGULATORY TRACKERGet deadline alerts
Dated research · 63 rules · 20 states · Data cutoff
AI & Privacy/Oregon/HB2395 (2019); ORS646A.813

Connected-device reasonable security

Enacted in force

Jurisdiction
Oregon [source]
Applies to
Manufacturers of connected devices sold or offered for sale in Oregon, subject to the statutory definitions and exclusions. [source]
Penalty
Enforced as an unlawful trade practice; no fixed numeric civil penalty is specified in the retrieved device-security provision. [source]
Detail review
Accepted record facts reviewed
Nov 13, 2026

Fields requiring verification

  • enforcement date: Unverified — No distinct enforcement-start date was established. Primary source

In plain English

  • Manufacturers of connected devices sold or offered for sale in Oregon, subject to the statutory definitions and exclusions. Primary source
  • Equip a covered device with reasonable security appropriate to its nature, function and collected or transmitted information. Primary source
  • Protect the device and its stored information against unauthorized access, destruction, use, modification or disclosure. Primary source
  • Where authentication outside a local-area network is possible, use a unique preprogrammed password or require the user to create a new means of authentication before first access. Primary source

Dates and phased obligations

2020-01-01 Primary source

· operative
2020-01-01 Primary source

Questions from this record

Who does HB2395 (2019); ORS646A.813 cover?

Manufacturers of connected devices sold or offered for sale in Oregon, subject to the statutory definitions and exclusions. Primary source

What is the law’s status?

Enacted / in force Primary source

What date does this record track?

2020-01-01 Primary source

Has this record been verified?

This record’s accepted facts were last reviewed on 2026-11-13; unsupported comparison fields remain Unverified. Primary source

Primary sources

Verification history

  • — Facts and dates reconciled from the accepted T1 report. Source
  • — Accepted T1 report content changed. Source

Not legal advice. This page restates the linked record and does not determine whether a particular business is covered. Methodology and verification limits.

Compare the tracked rulesDates, coverage, and sources in one quarterly file.
View the matrix