Can I collect cookie information from participants in Oregon? What are the requirements?

Requirements for Collecting Cookie Information from Participants in Oregon

In Oregon, the collection of cookie information from participants is subject to the Oregon Revised Statutes (ORS). The ORS contains provisions that regulate the collection, use, and disclosure of personal information, including cookie information.

Under ORS 646A.622, a person who owns or operates a website or online service that collects personally identifiable information through the use of cookies or other tracking technologies must provide a clear and conspicuous notice to the user that such information is being collected. The notice must include the following information:

• The categories of personally identifiable information that are being collected;
• The categories of third parties with whom the information may be shared;
• The process by which the user can review and request changes to his or her personally identifiable information; and
• The process by which the website or online service notifies users of material changes to its privacy policy.

Additionally, under ORS 646A.624, a person who owns or operates a website or online service that collects personally identifiable information through the use of cookies or other tracking technologies must obtain the user’s opt-in consent before collecting, using, or disclosing such information. The opt-in consent must be obtained through an affirmative action by the user, such as clicking a button or checking a box.

Jurisdiction

Oregon

• Privacy