2007 ORS § 802.191¹
Civil action for violation of ORS 802.175 to 802.187

(1) A person aggrieved by an intentional violation of ORS 802.175 (Definitions for ORS 802.175 to 802.191) to 802.187 (Relationship to other privacy statutes) may bring an action at law against a person who has knowingly obtained or used personal information about the aggrieved person in violation of ORS 802.175 (Definitions for ORS 802.175 to 802.191) to 802.187 (Relationship to other privacy statutes). The action shall be for actual damages or $2,500, whichever is greater, plus attorney fees and court costs reasonably incurred in the action.

(2) A person aggrieved by a violation of ORS 802.175 (Definitions for ORS 802.175 to 802.191) to 802.187 (Relationship to other privacy statutes), a district attorney or the Attorney General may obtain appropriate relief to enforce ORS 802.175 (Definitions for ORS 802.175 to 802.191) to 802.187 (Relationship to other privacy statutes), together with attorney fees and costs reasonably incurred in an action for relief.

(3) Any person whose use or obtaining of personal information in violation of ORS 802.175 (Definitions for ORS 802.175 to 802.191) to 802.187 (Relationship to other privacy statutes) subjects the State of Oregon to any liability or claim shall indemnify and hold harmless this state from all such liability and any claims, including attorney fees and court costs, incurred in any proceeding arising under ORS 802.175 (Definitions for ORS 802.175 to 802.191) to 802.187 (Relationship to other privacy statutes). [1997 c.678 §10]