Obtaining personal information by false representation (anti-phishing)
ORS 646A.808
Data security · Communications
Bars phishing: using electronic means to get someone's personal information by pretending, without permission, to be another person or business.
- Where
- Oregon
- Citation
- ORS 646A.808; 646.607(10)
- Status
- In force
- In force since
- 2015-05-21
- Enforced by
- Oregon Attorney General and district attorneys (ORS 646.632)
- People can sue
- No
- Penalties
- Unlawful trade practice under ORS 646.607: injunction and civil penalties up to $25,000 per willful violation (ORS 646.642(3)).
- Applies to
- Any person using a website, email, text message or other electronic means to solicit personal information; excludes law enforcement and lawful investigators
Practices it requires
- Do not induce anyone to provide personal information (as defined in ORS 646A.602) by electronically impersonating a third person without that person's authorization.ORS 646A.808(2)
Sources
Checked against these sources on 2026-09-25 by research agent (Claude), primary sources.
Research reference, not legal advice.