Technology

] Requires a [ communications provider ] social media platform to respond to a search warrant within 72 hours of service , and all other communications providers to respond within five business days of service, when the warrant pertains to an investigation of stalking or a crime constituting domestic violence. Declares an emergency, effective on passage.

Allows a person to operate an autonomous vehicle with the automated driving system engaged without a grant of driving privileges if certain conditions are met. Requires an automated driving system to be able to achieve a minimal risk condition or issue a request to intervene. Requires an autonomous vehicle to operate in compliance with state vehicle laws and comply with federal safety standards. Provides for exemptions. Allows the Department of Transportation to grant an autonomous vehicle that operates exclusively by an automated driving system and without an onboard driver an exemption to any state equipment requirement. Requires a person operating an autonomous vehicle that is involved in a collision that results in damages to property to perform certain duties. Exempts a person operating an autonomous vehicle from other certain duties of a driver. Prescribes financial responsibility requirements for a person operating an autonomous vehicle. Authorizes a person to operate an autonomous vehicle for the purpose of transporting persons or property for hire if the person provides certain information to the department and provides a first responder interaction plan. Prescribes that authorization does not expire unless suspended or revoked. Exempts autonomous vehicles and on-demand autonomous vehicle networks from provisions related to motor carriers. Prohibits local governments from regulating, imposing a tax or fee on or requiring a license or permit for on-demand autonomous vehicle networks. Prohibits local governments from prohibiting or regulating the operation of autonomous vehicles or on-demand autonomous vehicle networks.

Requires certain health insurers offering a health benefit plan in this state that provide utilization review or have utilization review provided on their behalf to notify a health care provider each time the insurer uses artificial intelligence or other automated technology to automatically downcode a claim for reimbursement submitted by the provider. Requires insurers to make an appeals process available to a provider who has had a claim automatically downcoded using artificial intelligence or other automated technology.

] Prohibits public bodies from disclosing personally identifiable information to a data broker unless the data broker attests that the information will not be sold or transferred to any entity that will use it to enforce federal immigration law. Does not apply if disclosure is required under public records law or by a court order. Does not apply if disclosure is made under the same terms and conditions under which the information is available to the general public. [ Declares an emergency, effective on passage. ] Takes effect on the 91st day following adjournment sine die.

Requires a local government, local service district or special government body to notify and submit a report to the State Chief Information Officer within 48 hours of an information security incident or ransomware incident. Prescribes the information that a public body is required to report. Directs the State Chief Information Officer to establish a reporting system that allows a public body to submit a notification or report in a timely, secure and confidential manner. Directs the State Chief Information Officer to create a webpage to provide instructions on how to provide notification and submit a report. Requires the State Chief Information Officer to provide an annual report to the Governor and the Joint Legislative Committee on Information Management and Technology on the information security incidents and ransomware incidents reported for the preceding year. Exempts information security incident or ransomware incident reports from disclosure under public records laws and allows for the sharing of information under certain circumstances. Becomes operative July 1, 2026. Declares an emergency, effective on passage.

] Establishes the Senator Aaron Woods Commission on Artificial Intelligence within the office of Enterprise Information Services. [ Establishes the commission's purpose to serve as a central resource to monitor the use of artificial intelligence technologies and systems in this state and report on long-term policy implications. ] Directs the commission to identify and report on long-term policy implications in the use of artificial intelligence technologies by the state. Directs the commission to [ provide ] submit an annual report to the Legislative Assembly. Allows the commission to make recommendations for legislation, regulations or policy to the Legislative Assembly. Directs the Oregon Department of Administrative Services to hire [ a Chief Artificial Intelligence Officer to assist the commission in carrying out the commission's duties. ] an individual responsible for developing the state's strategic vision related to privacy, data protection and artificial intelligence. Allows the department to charge a state [ or local agency or public body ] agency, officer, board or commission for [ the commission's ] services provided by the department or the Senator Aaron Woods Commission on Artificial Intelligence .

Requires operators of artificial intelligence companions and artificial intelligence companion platforms to provide notice to users that the users are interacting with artificial output if a reasonable person that interacts with the artificial intelligence companion or artificial intelligence companion platform would believe that the person was interacting with a natural person. Requires the operators to have in place a protocol for detecting suicidal ideation or intent or self-harm ideation or intent and to prevent output that could cause such ideation or intent in users. Specifies minimum contents of the protocol , including referral to an appropriate crisis lifeline and additional intervention informed by clinical best practices and expertise . Requires an operator to make certain statements and disclosures if the operator has reason to believe that a user that interacts with the operator's artificial intelligence companion or artificial intelligence platform is a minor. Requires the operator to take reasonable steps to prevent the artificial intelligence companion from generating statements that would lead a reasonable person to believe that the person was interacting with a natural person and to require the artificial intelligence companion to make certain other statements. Requires an operator to post a report each year on a publicly accessible website that discloses incidents in which the operator referred a user to resources to prevent suicidal ideation, suicide or self-harm. Allows a user that suffers ascertainable harm to bring an action for damages and injunctive relief.