Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I collect IP addresses from participants in Oregon? What are the requirements?

Based on the provided context documents, it appears that collecting IP addresses from participants in Oregon is subject to certain requirements.

Personal Information Collection Requirements in Oregon

Under Oregon law, businesses that collect personal information from Oregon residents are required to take certain steps to protect that information. Personal information is defined as any information that can be used to identify an individual, including but not limited to name, address, social security number, and email address [1.2].

Businesses that collect personal information are required to implement reasonable safeguards to protect that information from unauthorized access, acquisition, or disclosure. They must also provide notice to individuals about the types of personal information collected, the purposes for which it is collected, and how it will be used and shared. Additionally, businesses must provide individuals with the opportunity to opt-out of having their personal information shared with third parties [1.2].

Customer Proprietary Network Information (CPNI)

Telecommunications carriers in Oregon are subject to specific requirements related to the collection and use of customer proprietary network information (CPNI) [1.3]. CPNI includes individual customer information that a carrier accumulates in the course of providing telecommunications service to the customer, including information that relates to type, quantity, technical configuration, destination, location, billing amounts, and usage data. CPNI also includes information contained in bills pertaining to telecommunications service received by a customer, except that CPNI does not include subscriber list information [1.3].

Under Oregon law, a telecommunications carrier that receives or obtains CPNI by virtue of its provision of telecommunications service shall only use, disclose, or permit access to CPNI in its provision of the telecommunications service from which such information is derived or services necessary to, or used in, the provision of such telecommunications service, including publishing of directories and billing [1.3].

Conclusion

Based on the provided context documents, it appears that collecting IP addresses from participants in Oregon is subject to certain requirements related to the collection and protection of personal information. Additionally, telecommunications carriers in Oregon are subject to specific requirements related to the collection and use of customer proprietary network information (CPNI). It is recommended that you consult with a legal professional to ensure compliance with all relevant regulations and requirements.

[1.2]: ORAR 860-032-0100

[1.3]: ORAR 860-032-0510

Source(s):
Jurisdiction

Oregon