Skip to content

Market

Selling in Oregon?

We track 7 rules from 6 laws and lists for consumer goods here. Type your product to see which apply.

  • Free
  • No account needed
  • The law behind every rule
On this page6

Changes

Upcoming changes

Rules here that start in the next 24 months, or are proposed or on hold.

No dated changes in the next 24 months

No rule for Oregon starts in the next 24 months, and none is proposed or on hold.

Industries

Coverage

What we check here for each industry, and from when. Open an industry to see what we cover and what we don't. A law we hold but haven't checked shows as Not checked, with its quote. Anything we don't cover shows as Not covered. Neither is ever clear.

ClaraDB gives a verdict only for PFAS state laws for cookware and bakeware, California Proposition 65 consumer-product warning check for BPA, BPS, formaldehyde, styrene, antimony trioxide, vinyl acetate, lead and cadmium, California Proposition 65 warning check for candles and ceramicware (lead, cadmium, formaldehyde, acetaldehyde, benzene, naphthalene, carbon monoxide, benzo[a]pyrene), US packaging EPR producer size thresholds (California, Colorado, Maryland, Minnesota, Oregon, Washington) for a brand-owning manufacturer, US lead in children's products and furniture (lead paint and total lead content), US lead in toys and child care articles (lead paint and total lead content), US lead in children's products (other) and bags (lead paint and total lead content), US phthalates in children's toys and child care articles (DEHP, DBP, BBP, DINP, DIBP, DPENP, DHEXP, DCHP) and US children's product certificate and tracking label for children's tableware (AI-checked, quotes verified word for word). Every other answer shows the laws and quotes found without saying whether they apply. Not checked: Consumer electronics (FCC equipment authorization, 47 CFR Parts 2 and 15, energy rules). What ClaraDB has checked

Home and kitchen goodsMain sourcesfrom 1 Jan 20251 area read · 1 not read yet
Sources read
  • PFAS in foodware containers (ORS 459.465 to 459.477)
Not read yet
  • Other state chemical and product-safety laws for home and kitchen goods (not yet reviewed)
Cosmetics and personal careNot coveredNo sources read yet

Oregon (US state): ClaraDB stores no laws for this market yet (not stored: PFAS in cosmetics (reported SB 546, 2027+); Unverified; official text).

Packaged food and beveragesMain sources

Oregon (US state): main sources stored. Not stored: other rules that may apply.

Consumer electronics and small appliancesMain sourcesfrom 1 Jan 20251 area read · 1 not read yet

ORS 646A.813 is stored from the Internet Archive copy of the Oregon Legislature's ORS chapter 646A page (2025 edition).

Sources read
  • security of Internet-connected devices (ORS 646A.813)
Not read yet
  • Other Oregon product-safety and chemical laws for consumer electronics (not yet reviewed)
Batteries, e-bikes and power banksMain sources

Oregon (US state): main sources stored. Not stored: other rules that may apply.

Types

Rules by type

What the rules require. Pick a type to filter the laws below; pick it again to show every type.

Laws

Rules by law

4 of 7 rules match the type testing and certification. Open a law to read its rules.

Type: Testing and certification. Show every type

Oregon security requirements for Internet-connected devices (ORS 646A.813)ORS 646A.8131 ruleIn force from: 1 Jan 2019Industries: Electronics, Batteries
Requirement
Applies when
Effective
Source
Conformity

Manufacturer must equip a connected device with reasonable security features

Must meet the conditions of A manufacturer shall equip a connected device with reasonable security features. A reasonable security feature may consist of a means for authentication from outside a local area network (a preprogrammed password that is unique for each connected device, or a requirement that a user generate a new means of authentication before gaining access for the first time), or compliance with requirements of federal law or federal regulations that apply to security measures for connected devices. Connected device (ORS 646A.813(1)(a)): “a device or other physical object that: (A) Connects, directly or indirectly, to the Internet and is used primarily for personal, family or household purposes; and (B) Is assigned an Internet Protocol address or another address or number that identifies the connected device for the purpose of making a short-range wireless connection to another device.” Manufacturer (1)(b): “a person that makes a connected device and sells or offers to sell the connected device in this state.”

Exemptions (4)

Does not apply to a connected device on which a consumer installs software or other devices the manufacturer does not approve or that damage, evade, disable or modify the reasonable security features

“A connected device on which a consumer installs or otherwise adds software or other devices that the manufacturer of the connected device does not approve for use with the connected device”
ORS 646A.813(4)(a) (excerpt) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

Does not apply to a person subject to HIPAA, with respect to any action the Act regulates

“or regulations promulgated under the Act, with respect to any action that the Act regulates.”
ORS 646A.813(4)(b) (excerpt) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

Does not apply to a connected device whose functions are subject to and comply with FDA requirements for medical devices (21 CFR parts 800 to 1299), including software as a medical device

“A connected device, the functions of which are subject to and comply with the requirements, regulations and guidance that the United States Food and Drug Administration”
ORS 646A.813(4)(c) (excerpt) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

No duty for software, firmware or peripheral devices that another manufacturer makes and that a consumer installs in or adds to the connected device

“Impose a duty on a manufacturer to provide reasonable security features for software, firmware or peripheral devices that another manufacturer makes”
ORS 646A.813(3)(d) (excerpt) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

The start date is not stated in the text (date unknown).

Penalty

A manufacturer that violates subsection (2) engages in an unlawful trade practice under ORS 646.607 (no penalty amount is stated in this section)

“A manufacturer that violates subsection (2) of this section engages in an unlawful trade practice under ORS 646.607.”
ORS 646A.813(6) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

Unofficial copy of the text, current to 13 Oct 2026. Internet Archive capture (2026-10-13) of the Oregon Legislature's official ORS chapter 646A page, 2025 edition.

  • It is a connected device: an Internet-connected device used primarily for personal, family or household purposes (ORS 646A.813(1)(a))
  • Connects to the internet or a network
  • Your role: Manufacturer

Depends on: internet connectable, economic operator role

In force, start date unknown

The published text gives only the session law (“[2019 c.193 §1]”) and no operative date, so from is the first day of the 2019 session year as a stand-in (date not stated).

“A manufacturer shall equip a connected device with reasonable security features.”
ORS 646A.813(2) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)
  • Conformity

    Manufacturer must equip a connected device with reasonable security features

    Must meet the conditions of A manufacturer shall equip a connected device with reasonable security features. A reasonable security feature may consist of a means for authentication from outside a local area network (a preprogrammed password that is unique for each connected device, or a requirement that a user generate a new means of authentication before gaining access for the first time), or compliance with requirements of federal law or federal regulations that apply to security measures for connected devices. Connected device (ORS 646A.813(1)(a)): “a device or other physical object that: (A) Connects, directly or indirectly, to the Internet and is used primarily for personal, family or household purposes; and (B) Is assigned an Internet Protocol address or another address or number that identifies the connected device for the purpose of making a short-range wireless connection to another device.” Manufacturer (1)(b): “a person that makes a connected device and sells or offers to sell the connected device in this state.”

    Exemptions (4)

    Does not apply to a connected device on which a consumer installs software or other devices the manufacturer does not approve or that damage, evade, disable or modify the reasonable security features

    “A connected device on which a consumer installs or otherwise adds software or other devices that the manufacturer of the connected device does not approve for use with the connected device”
    ORS 646A.813(4)(a) (excerpt) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

    Does not apply to a person subject to HIPAA, with respect to any action the Act regulates

    “or regulations promulgated under the Act, with respect to any action that the Act regulates.”
    ORS 646A.813(4)(b) (excerpt) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

    Does not apply to a connected device whose functions are subject to and comply with FDA requirements for medical devices (21 CFR parts 800 to 1299), including software as a medical device

    “A connected device, the functions of which are subject to and comply with the requirements, regulations and guidance that the United States Food and Drug Administration”
    ORS 646A.813(4)(c) (excerpt) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

    No duty for software, firmware or peripheral devices that another manufacturer makes and that a consumer installs in or adds to the connected device

    “Impose a duty on a manufacturer to provide reasonable security features for software, firmware or peripheral devices that another manufacturer makes”
    ORS 646A.813(3)(d) (excerpt) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

    The start date is not stated in the text (date unknown).

    Penalty

    A manufacturer that violates subsection (2) engages in an unlawful trade practice under ORS 646.607 (no penalty amount is stated in this section)

    “A manufacturer that violates subsection (2) of this section engages in an unlawful trade practice under ORS 646.607.”
    ORS 646A.813(6) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

    Unofficial copy of the text, current to 13 Oct 2026. Internet Archive capture (2026-10-13) of the Oregon Legislature's official ORS chapter 646A page, 2025 edition.

    Applies when
    • It is a connected device: an Internet-connected device used primarily for personal, family or household purposes (ORS 646A.813(1)(a))
    • Connects to the internet or a network
    • Your role: Manufacturer

    Depends on: internet connectable, economic operator role

    Effective

    In force, start date unknown

    The published text gives only the session law (“[2019 c.193 §1]”) and no operative date, so from is the first day of the 2019 session year as a stand-in (date not stated).

    Source
    “A manufacturer shall equip a connected device with reasonable security features.”
    ORS 646A.813(2) · fetched 2026-10-25Oregon Legislature (ORS 2025 edition; Internet Archive capture): ORS 646A.813(opens in a new tab)

Categories

Categories with rules

The product categories with the most rules here, sub-categories included.

Sources

Sources

Where the rules come from, and when we last checked each source.

Show 2 more

Alerts

Get an email when these rules change.

Check a product free, no account needed. Save it, and you see when a rule that affects it changes, and Team emails you the day it does.

Check a productStart a workspace

Free for 10 products. Email alerts from $39 a month. See pricing