Relating to consumer protection.

Added an exemption allowing utilities to sell personal data generated by advanced utility metering infrastructure systems without violating the sales prohibition.

Updated the bill's ordering date from April 14 (House) to May 16 (Senate) and added Senate amendment dates to the version history.

Expanded the list of sponsoring representatives and added senators to the bill's sponsor list.

Changed from requiring a study on consumer protection to establishing binding requirements for data controllers to specify purposes for data collection, limit data to what is necessary, implement safeguards, and provide easy consent revocation mechanisms.

Added prohibition on processing personal data for targeted advertising or selling personal data if the controller knows or should know the consumer is under 16 years old.

Added prohibition on selling personal data that accurately identifies a consumer's location within a 1,750-foot radius.

Added requirement for controllers to provide clear privacy notices listing data categories, purposes, third-party sharing, and consumer rights exercise methods.

Added prohibition on discriminating against consumers who exercise their privacy rights under the Oregon Consumer Privacy Act.

Removed the sunset provision that would have ended the bill's effect on January 2, 2027, making the new requirements permanent.