1. United States
2. Ore.
3. Letter

I'm writing to ask you to introduce or support legislation creating a centralized data broker deletion portal for Oregon, similar to California's new Delete Request and Opt-out Platform (DROP), which lets residents submit one verified request to have their personal information deleted across all registered data brokers at once. Right now, Oregon consumers technically have deletion rights under the Oregon Consumer Privacy Act, but exercising them means contacting each data broker individually — a process that's impractical for most people and effectively limits the protection the law was meant to provide. Oregon already has the foundation for a centralized solution: a data broker registry administered by the Division of Financial Regulation and existing enforcement authority. What's missing is the mechanism to make deletion rights actually usable. This program doesn't need to burden the General Fund. It can be structured so registration fees paid by data brokers themselves cover both development and ongoing operation of the portal — an approach modeled on how the registry is already funded. A modest adjustment to the current registration fee, potentially with a temporary implementation surcharge, could fund the portal within a few years and sustain it afterward. Beyond privacy, this kind of portal reduces the pool of personal data available to identity thieves and scammers, which can translate into real savings for state agencies dealing with fraud in areas like unemployment insurance, Medicaid, and DMV services. I'd urge you to bring forward or support legislation establishing this kind of centralized, broker-funded deletion system for the 2027 session. Oregon has an opportunity to build on the privacy protections it's already established and make them meaningfully accessible to everyday residents.