Question 18
UnclassifiedWhat do Oregon's January 1, 2026 changes show about state privacy laws generally?
Correct answer: B
Explanation
Oregon’s January 1, 2026 changes show that state privacy laws can keep evolving after enactment by adding new compliance duties. The answer fits the pattern of “operational requirements such as universal opt-out recognition or new use restrictions,” which states may impose later as privacy regimes mature.
Why each option is right or wrong
A. State privacy statutes are static once enacted
B. States may continue to add operational requirements such as universal opt-out recognition or new use restrictions after initial enactment
Oregon’s January 1, 2026 amendments to its consumer privacy law illustrate that a state privacy statute is not fixed at enactment: the legislature can later layer on additional compliance duties, including operational mechanisms like honoring universal opt-out signals and restricting certain downstream uses of personal data. In Oregon, these kinds of post-enactment changes are imposed through the state’s privacy framework rather than requiring a wholesale rewrite, showing that states may continue to expand obligations after the original effective date.
C. Only California updates privacy law after enactment
D. State privacy laws can never affect advertising