Or. Admin. R. 441-840-0070 – Disclosure of Significant Developments

(1) A data broker shall disclose to the director of any breach of security as required in ORS 646A.604 within 45 days of any such breach.
(2) A registered data broker shall notify the director within 45 days following:
1. (a) Any changes in the information required on the data broker under OAR 441-840-0020 or OAR 441-840-0040;
2. (b) Any other material changes to information submitted in registration application under OAR 441-840-0020 or OAR 441-840-0040.
3. (c) Any change in assumed business name registered with Secretary of State.
(3) A data broker’s registration may be terminated or suspended for any violation of OAR 441-840-0070(2).

ORS 646A.593(8) & 646A.626

ORS 646A.593(2) - 646A.593(4) & 646A.604(3)