- Oregon lawmakers passed Senate Bill 1587 to prevent government data from reaching immigration enforcement agencies.
- The bill requires written assurance from brokers that personal information will not be sold for enforcement purposes.
- Supporters argue the measure shields vulnerable immigrant communities from unwanted surveillance and data commercialization.
(OREGON) — Oregon lawmakers approved Senate Bill 1587 (SB 1587) on March 2, 2026, prohibiting state and local government agencies from disclosing personally identifiable information to data brokers unless the brokers provide “written assurance that the information will not be sold or transferred for immigration enforcement purposes.”
The bill passed the Oregon House that day and now awaits Governor Tina Kotek’s signature.
Supporters cast Senate Bill 1587 as a response to fears that government-held information can move into private markets and then return to government hands for immigration enforcement in ways residents do not expect. The measure targets disclosures by state and local agencies to data brokers, with immigration enforcement singled out as the downstream use the bill seeks to block through the written-assurance requirement.
At the center of the bill sits a compliance condition aimed at the data broker ecosystem: agencies cannot hand over personally identifiable information unless the broker commits in writing that it will not end up sold or transferred for immigration enforcement purposes. The bill’s text, as described by sponsors, also reaches information that could be linked to license plates.
Oregon lawmakers advanced the measure as the state also debates how police and vendors handle license plate reader data. That broader discussion includes a separate bill, Senate Bill 1516A (SB 1516A), and local transparency statements from the Eugene Police Department about its own system.
Senate Bill 1587 focuses on personally identifiable information held by public entities, an umbrella that commonly covers identifying data stored in government files. Sponsors described the bill as covering information that can point back to a person, including data that could be connected to license plates when linked with other records.
The bill’s structure assumes that information does not need to look like a name on a page to become identifying. Data associated with a vehicle or a plate can gain power when paired with other details held by agencies or available commercially, a linkage that privacy advocates and lawmakers increasingly cite in debates over surveillance and immigration enforcement.
Under SB 1587, the written assurance functions as a gatekeeping step in state and local workflows. Before disclosing covered personally identifiable information to a data broker, an agency must obtain “written assurance that the information will not be sold or transferred for immigration enforcement purposes.”
That assurance requirement does not operate as a broad privacy rewrite for Oregon residents’ information across the economy. Instead, it sets a condition on government-to-broker disclosures, effectively pushing privacy and immigration-enforcement concerns into procurement, contracting, and data-sharing practices across public entities.
Public agencies would likely need to build the assurance step into routine operations that rely on outside data services, including contract templates, vendor onboarding, and any program that involves transferring personally identifiable information to brokers. In practice, the bill ties the ability to share to documentation, requiring agencies to treat downstream immigration enforcement risk as a compliance issue rather than an afterthought.
The bill also builds on earlier Oregon privacy actions, including the state’s 2023 data broker registration requirements. It also adds to a landscape shaped by the Oregon Consumer Privacy Act, which allows residents to opt out of personal data sales.
Those earlier tools focus on how personal data circulates in commercial channels and what rights residents can exercise. Senate Bill 1587 targets a different starting point: disclosure of government-held personally identifiable information to data brokers, with a specific emphasis on preventing the data’s resale or transfer for immigration enforcement purposes.
Supporters framed SB 1587 as a measure aimed at immigrant safety and limiting surveillance. “With the federal administration using every surveillance tool at their disposal against Oregon’s immigrant community, it is critical we continue to protect our most personal and sensitive data. SB 1587 adds a guardrail to shield Oregonian’s immigration status from being sold to the highest bidder,” said Rep. Willy Chotzen, a Democrat from Portland.
Rep. Farrah Chaichi, a Democrat from Beaverton and Aloha, linked the bill to broader concerns about monitoring and commercialization of personal details. “In an era of mass surveillance, it is critical that we do not sell out our most vulnerable neighbors to bad actors with deep pockets,” Chaichi said.
Rep. Ricki Ruiz, a Democrat from Gresham, pointed to the ways fear of immigration enforcement can shape personal decisions far outside the immigration system itself. “No one should be choosing between seeking medical emergency care or having to worry about whether they can be at risk of being taken by unmarked vehicles and end up in a different state in an immigration detention center,” Ruiz said.
Rep. Susan McLain, a Democrat from Hillsboro, Forest Grove, and Cornelius, described the bill as a stewardship measure for public entities. “Oregonians deserve to know that when they engage with our state’s public entities, their personal information will be handled with care. This bill provides an important layer of protection from the federal government’s reckless actions,” McLain said.
After the House vote on March 2, 2026, the bill moved to the governor’s desk. Awaiting signature means the measure does not take effect through legislative passage alone and remains pending until Kotek acts.
For residents, the bill’s immediate posture centers on what comes next from the governor’s office rather than any instant change in how agencies handle data. For agencies and vendors, the wait can still be a planning window, with organizations watching for a signing announcement and any effective-date language that would shape implementation timing.
Parallel debates over license plate readers have helped pull attention toward SB 1587, even as the bills target different points in the data chain. The Eugene Police Department maintains a transparency portal for its license plate reader system that confirms it does not share data for immigration enforcement.
The Eugene portal also limits sharing to Oregon law enforcement agencies under city Ordinance 20579 and Oregon Revised Statute 181A.823. The statute generally prohibits inquiring into immigration status.
Those local references highlight why license plate reader data remains a flashpoint in privacy and immigration enforcement discussions. License plate information can act as a location trail, and residents and lawmakers have raised concerns over whether such data can be repurposed beyond its original public-safety rationale.
Separate from SB 1587, Oregon lawmakers have considered Senate Bill 1516A, which regulates license plate reader use by law enforcement. As of March 2, 2026, SB 1516A had passed the Senate and was under House consideration.
SB 1516A requires vendor policies, limits out-of-state data sharing, and prohibits vendors from selling or disclosing license plate data. It has support from the Oregon Association of Chiefs of Police and Asian American Council of Oregon.
The two measures address similar anxieties but aim at different targets. SB 1587 restricts when state and local government agencies can disclose personally identifiable information to data brokers, conditioning the disclosure on a written assurance tied to immigration enforcement.
SB 1516A, by contrast, centers on law enforcement use of license plate readers and limits on vendors and sharing, including out-of-state restrictions and vendor prohibitions on selling or disclosing plate data. The interaction between the bills, if both advance, would sit in the overlap between agencies’ operational needs, vendor relationships, and the downstream uses of information, but SB 1587 does not present itself as a license plate reader law.
If Kotek signs SB 1587, the most immediate shift would likely appear inside state and local administrative processes rather than in a visible consumer-facing portal. Agencies that share personally identifiable information with data brokers would need to review existing agreements and data-sharing practices to ensure the required “written assurance that the information will not be sold or transferred for immigration enforcement purposes” stands in place.
That could mean increased vendor due diligence and new documentation expectations, as agencies treat immigration enforcement as a defined downstream risk in data transfers. Implementation would likely revolve around internal guidance, compliance memos, and procurement or contract template updates that encode the assurance condition into routine government dealings with data brokers.
