OAR 177-010-0115
Data Privacy and Security Policy
(1)
The Lottery may be in possession of personally identifiable information that may be submitted voluntarily by a person creating a player account or filling out a prize claim form or automatically collected when a person uses the mobile app, website, or site.(2)
The Lottery will comply with ORS 646A.622 (Requirement to develop safeguards for personal information) and take reasonable efforts to ensure personally identifiable information is secure from loss, unauthorized access, illegal use, or unauthorized disclosure, including through the use of encryption software, storing personally identifiable information in secure locations, and using and disclosing information only as allowed or required by law and in accord with Lottery policies and procedures.(3)
The Lottery will not sell personally identifiable information.(4)
The Lottery will maintain a privacy policy.(5)
The Lottery will not disclose personally identifiable information except as follows:(a)
In the aggregate such that no individual can be identified;(b)
As described in OAR 177-046-0130 (Disclosure of Winners) as it relates to prize winners; and(c)
When required by law.
Source:
Rule 177-010-0115 — Data Privacy and Security Policy, https://secure.sos.state.or.us/oard/view.action?ruleNumber=177-010-0115.