Ask Reggi Your Question Now

Reggi is the free generative AI assistance for regulatory compliance
Ask a Question

Can I use third-party email marketing tools that collect personal information in Oregon? What are the requirements?

Based on the context documents provided, there are no specific requirements mentioned for using third-party email marketing tools that collect personal information in Oregon. However, there are general rules regarding the disclosure of information to clients or third parties [1.1], license application requirements for third-party administrators [3.1], and the use of social security numbers [4.1].

If you are collecting personal information through email marketing tools, you must comply with the rules regarding the disclosure of individually identifying information concerning clients without their authorization [1.1]. The Department will disclose only the minimum amount of information necessary for the purpose.

Additionally, if you are a third-party administrator, you must comply with the license application requirements outlined in [3.1]. These requirements include providing information relating to the organizational form of the applicant, biographical information for each owner, partner, director, and officer of the applicant, and annual financial statements or reports for the two most recent years.

Furthermore, if you are collecting social security numbers, you must comply with the rules outlined in [4.1]. These rules include notifying the eligible employee or family member of the specific use or uses that will be made of the number and obtaining consent for voluntary use of the social security number.

If you are reselling or redisclosing personal information obtained from DMV, you must be authorized by DMV [2.2]. To be authorized by DMV, you must provide evidence to DMV sufficient to establish that you are qualified to obtain personal information under ORS 802.179.

In summary, while there are no specific requirements mentioned for using third-party email marketing tools that collect personal information in Oregon, you must comply with the general rules regarding the disclosure of information to clients or third parties, license application requirements for third-party administrators, and the use of social security numbers. Additionally, if you are reselling or redisclosing personal information obtained from DMV, you must be authorized by DMV.

Source(s):
Jurisdiction

Oregon