2013 ORS § 646A.602¹
Definitions for ORS 646A.600 to 646A.628

As used in ORS 646A.600 (Short title) to 646A.628 (Allocation of moneys):

(1)(a) Breach of security means an unauthorized acquisition of computerized data that materially compromises the security, confidentiality or integrity of personal information that a person maintains.

(b) Breach of security does not include an inadvertent acquisition of personal information by a person or the persons employee or agent if the personal information is not used in violation of applicable law or in a manner that harms or poses an actual threat to the security, confidentiality or integrity of the personal information.

(2) Consumer means an individual resident of this state.

(3) Consumer report means a consumer report as described in section 603(d) of the federal Fair Credit Reporting Act (15 U.S.C. 1681a(d)), as that Act existed on October 1, 2007, that a consumer reporting agency compiles and maintains.

(4) Consumer reporting agency means a consumer reporting agency as described in section 603(p) of the federal Fair Credit Reporting Act (15 U.S.C. 1681a(p)) as that Act existed on October 1, 2007.

(5) Debt means any obligation or alleged obligation arising out of a consumer transaction, as defined in ORS 646.639 (Unlawful collection practices).

(6) Encryption means the use of an algorithmic process to transform data into a form in which the data is rendered unreadable or unusable without the use of a confidential process or key.

(7) Extension of credit means a right to defer paying debt or a right to incur debt and defer paying the debt, that is offered or granted primarily for personal, family or household purposes.

(8) Identity theft has the meaning set forth in ORS 165.800 (Identity theft).

(9) Identity theft declaration means a completed and signed statement that documents alleged identity theft, using the form available from the Federal Trade Commission, or another substantially similar form.

(10) Person means any individual, private or public corporation, partnership, cooperative, association, estate, limited liability company, organization or other entity, whether or not organized to operate at a profit, or a public body as defined in ORS 174.109 (Public body defined).

(11) Personal information:

(a) Means a consumers first name or first initial and last name in combination with any one or more of the following data elements, when the data elements are not rendered unusable through encryption, redaction or other methods, or when the data elements are encrypted and the encryption key has also been acquired:

(A) Social Security number;

(B) Driver license number or state identification card number issued by the Department of Transportation;

(C) Passport number or other United States issued identification number; or

(D) Financial account number, credit or debit card number, in combination with any required security code, access code or password that would permit access to a consumers financial account.

(b) Means any of the data elements or any combination of the data elements described in paragraph (a) of this subsection when not combined with the consumers first name or first initial and last name and when the data elements are not rendered unusable through encryption, redaction or other methods, if the information obtained would be sufficient to permit a person to commit identity theft against the consumer whose information was compromised.

(c) Does not include information, other than a Social Security number, in a federal, state or local government record that is lawfully made available to the public.

(12) Proper identification means written information or documentation that a consumer or representative can present to another person as evidence of the consumers or representatives identity, examples of which include:

(a) A valid Social Security number or a copy of a valid Social Security card;

(b) A certified or otherwise official copy of a birth certificate that a governmental body issued; and

(c) A copy of a driver license or other government-issued identification.

(13) Protected consumer means an individual who is:

(a) Not older than 16 years old at the time a representative requests a security freeze on the individuals behalf; or

(b) Incapacitated or for whom a court or other authority has appointed a guardian or conservator.

(14) Protective record means information that a consumer reporting agency compiles to identify a protected consumer for whom the consumer reporting agency has not prepared a consumer report.

(15) Redacted means altered or truncated so that no more than the last four digits of a Social Security number, driver license number, state identification card number, account number or credit or debit card number is accessible as part of the data.

(16) Representative means a consumer who provides a consumer reporting agency with sufficient proof of the consumers authority to act on a protected consumers behalf.

(17) Security freeze means a notice placed in a consumer report at a consumers request or a representatives request or in a protective record at a representatives request that, subject to certain exemptions, prohibits a consumer reporting agency from releasing information in the consumer report or the protective record for an extension of credit, unless the consumer temporarily lifts the security freeze on the consumers consumer report or a protected consumer or representative removes the security freeze on or deletes the protective record. [2007 c.759 §2; 2013 c.415 §1]