Skip to main content

Oregon State Flag An official website of the State of Oregon »

Oregon.gov Homepage

Data Broker registry

House Bill 2052, enacted during the 2023 Oregon Legislative Session, requires a data broker register prior to collecting, selling or licensing brokered personal data within Oregon. A data broker is a business that collects and sells or licenses brokered personal data to someone else.  Licensing brokered personal data is granting access to or distributing data from one person to another in exchange for consideration, like money or some other thing of value.  Brokered personal data is computerized data elements about a person who lives in Oregon that includes any of the following: 

  • Name or name of a member of the person's immediate family or household;
  • Address or address of a member of the person's immediate family or household;
  • Date or place of birth;
  • Maiden name of the person's mother;
  • Biometric information;
  • Social security number or other government-issued identification number; or
  • Other information that alone or in combination with other information sold or licensed can be reasonably associated with the individual.

Data brokers are required to register starting January 1, 2024.

Contact information

Data Broker Compliance Specialist
dfr.ndp.licensing@dcbs.oregon.gov
503-947-7300, option 2

Additional resources



For Applicants:

There are no initial or continuing education requirements.  There is no fingerprinting or background check requirement.  We do not require the submission of financial statements. 

To register:

  1. As part of the registration review, the division will verify that the data broker has an active registration to do business in Oregon with the Oregon Secretary of State, Corporations Division.  To ensure smooth processing of your registration with the Division, make sure that your registration is active there before submitting your registration as a data broker. 
  2. Apply through eGov and pay the registration fee of $600.00. 
  3. As part of the application, submit a succinct narrative (under 600 characters in total) that describes the various methods that consumers can use to opt out of the collection, selling and licensing of personal data.  This information will be published on the division's website for consumers to review.

The Data Broker registration is valid through the end of each calendar year and will expire at the end of the calendar year if it is not renewed. 

To renew a registration:

  1. Ensure that your registration to do business in Oregon is active at the Oregon Secretary of State, Corporations Division
  2. Submit a renewal application at https://ordcbs.mylicense.com/eGov/ at least 30 days before the expiration of the registration and pay the $600 renewal fee.

Any time you change any method that consumers can use to opt out of the collection, selling and licensing of personal data, be sure to review the narrative for your company on the division's website to ensure it remains accurate.  Notify the division of any changes that need to be made so that consumers have accurate information.