OAR 441-840-0070. Disclosure of Significant Developments

(1) A data broker shall disclose to the director of any breach of security as required in ORS 646A.604 within 45 days of any such breach. (2) A registered data broker shall notify the director within 45 days following: (a) Any changes in the information required on the data broker under OAR 441-840-0020 or OAR 441-840-0040; (b) Any other material changes to information submitted in registration application under OAR 441-840-0020 or OAR 441-840-0040. (c) Any change in assumed business name registered with Secretary of State. (3) A data broker’s registration may be terminated or suspended for any violation of OAR 441-840-0070(2).