Platuni

Oregon Landlord Compliance · Keep the right records

Oregon Tenant Data Privacy Law 2026: Confidential Information Can Be Disclosed in Only 7 Situations

An Oregon landlord who hands a tenant's Social Security number or immigration status to someone who merely asks has been exposed to statutory damages since June 5, 2026. House Bill 4123 built a blanket confidentiality rule around a tenant's personal information, carving out only 7 specific situations where disclosure is actually allowed.

Written by Platuni

The short answer

  1. 1.Since June 5, 2026, Oregon landlords can't disclose a tenant, former tenant, applicant, or household member's confidential information except in 7 specifically listed situations.
  2. 2.Protected information includes date of birth, Social Security number and government ID, phone and email, banking and tax information, employer details, immigration or citizenship status, records of habitability or VAWA-related complaints, and medical or disability records.
  3. 3.The 7 exceptions cover: written consent from the individual, a court order or judicial subpoena, affordable-housing compliance audits, background or credit screening, sharing contact info for repairs or utility coordination, responding to another landlord's reference request, and use in insurance claims, collections, or court proceedings.
  4. 4.A knowing violation triggers statutory damages equal to twice the monthly rent of the tenancy or prospective tenancy involved.
  5. 5.This law applies broadly across the landlord-tenant relationship, covering current tenants, former tenants, applicants, and household members alike.
  6. 6.This comes from House Bill 4123 (2026), Oregon Laws 2026, Chapter 61.

This covers

  • · Oregon landlords, property managers, and leasing staff who handle tenant personal information
  • · The full list of protected information categories and the narrow exceptions that allow disclosure
  • · The statutory damages exposure for a knowing violation

Usually exempt

  • · A disclosure made with the individual's own written consent isn't a violation; this law restricts unauthorized disclosure, not disclosure the tenant has agreed to
  • · Routine background and credit screening during the application process is a recognized exception, not a violation of this law
  • · This article doesn't resolve every edge case of what counts as "necessary" sharing for repairs or utility coordination; when in doubt, limiting shared information to what a specific maintenance or utility issue actually requires is the safer approach

1. Why this is a blanket rule with narrow carve-outs, not a general guideline

The law's structure prohibits disclosure of confidential information except where one of the specifically listed exceptions applies.

[Cite: Or. Laws 2026 ch. 61]

That's a meaningfully different legal posture than a general privacy best-practice recommendation; a landlord who discloses tenant information for a reason not on the specific exception list has violated the statute, regardless of how reasonable that reason might otherwise seem.

2. What categories of information actually count as protected

Protected confidential information includes date of birth, Social Security numbers and government-issued identification, phone numbers and email addresses, banking information, tax returns and W-2 statements, income sources, employer details, immigration or citizenship status, records of a tenant asserting rights such as habitability complaints or VAWA protections, and medical records or disability information.

[Cite: Or. Laws 2026 ch. 61]

That's a wide-reaching list; a landlord's casual mention of a tenant's employer to an unrelated third party, not just an obviously sensitive disclosure like an immigration status comment, falls within this law's scope.

3. Why the immigration-status protection drew particular legislative attention

Among the protected categories, immigration or citizenship status was a specific focus during this bill's legislative process, reflecting concern about landlords disclosing that information in ways that could expose tenants to harm.

[Cite: Or. Laws 2026 ch. 61]

A landlord who previously disclosed a tenant's immigration status to a third party, even informally, now faces statutory damages exposure for that specific conduct going forward.

5. Why court orders and audits get their own specific carve-outs

Disclosure is also permitted when required by a court order or judicial subpoena, or when necessary for affordable-housing compliance audits.

[Cite: Or. Laws 2026 ch. 61]

These 2 exceptions recognize that landlords sometimes face independent legal obligations to disclose information, such as during litigation or a regulatory compliance review for subsidized housing; a landlord responding to a legitimate subpoena isn't violating this law by complying with it.

6. Why background screening remains a recognized, routine exception

Using tenant information for background or credit screening is one of the 7 listed exceptions.

[Cite: Or. Laws 2026 ch. 61]

A landlord's standard tenant-screening process, which inherently involves sharing an applicant's personal information with a screening company, remains lawful under this exception; the law doesn't disrupt the ordinary application-screening workflow.

7. Why the repairs-and-utilities exception is narrower than it might sound

Sharing phone or email contact information is permitted specifically when necessary for coordinating repairs, maintenance, or utilities.

[Cite: Or. Laws 2026 ch. 61]

That exception is tied to contact information specifically, and to a defined operational purpose; it doesn't extend to sharing a tenant's financial or immigration information with a contractor or utility company under the same justification.

8. Why reference requests from other landlords have their own exception

Responding to a reference request from a prospective landlord is a separate, specifically listed exception.

[Cite: Or. Laws 2026 ch. 61]

A property manager providing a standard tenancy reference to another landlord considering the same applicant is working within this exception, provided the response sticks to information relevant to that reference rather than disclosing unrelated protected categories.

9. Why insurance, collections, and court proceedings round out the exception list

The final listed exception covers using confidential information in insurance claims, collections actions, or court proceedings.

[Cite: Or. Laws 2026 ch. 61]

A landlord pursuing a collections action against a former tenant for unpaid rent can use that tenant's relevant financial information within that legal process; the exception is tied to those specific proceedings, not a general license to use the information however the landlord sees fit afterward.

10. Why the statutory damages figure creates real financial exposure

A knowing violation triggers statutory damages equal to twice the monthly rent of the tenancy or prospective tenancy at issue.

[Cite: Or. Laws 2026 ch. 61]

That's a damages figure set independent of whatever actual harm the disclosure caused; a landlord facing a claim under this law is exposed to that statutory amount even if the tenant can't separately prove a specific financial loss resulted from the disclosure.

11. What property managers should do now

The practical starting point is training leasing and maintenance staff on exactly what counts as confidential information under this law and which of the 7 exceptions, if any, covers a given disclosure situation before it's shared.

For any disclosure that doesn't clearly fall within one of the 7 listed exceptions, getting written consent from the tenant first, rather than assuming a disclosure is reasonable or routine, is the safer compliance path given the statutory damages exposure.

Reading this as a tenant?

Since June 5, 2026, your Oregon landlord can't share your Social Security number, immigration status, income details, medical records, or other personal information with most third parties unless you've consented in writing or a specific legal exception applies. If they knowingly do it anyway, you may be entitled to statutory damages equal to twice your monthly rent.

Sources and review

  1. 1.House Bill 4123 (2026), Oregon Laws 2026, Chapter 61.

Substantive review means an editor re-checked each cited section against the current code, not that the page was re-saved. Corrections: compliance@platuni.com.

Frequently asked questions

When did Oregon's tenant data privacy law take effect?

June 5, 2026, under House Bill 4123 (2026), Oregon Laws 2026, Chapter 61.

What information is protected under this law?

Date of birth, Social Security number and government ID, contact information, banking and tax information, employer details, immigration or citizenship status, rights-assertion records, and medical or disability information.

When can a landlord disclose this information?

Only with the individual's written consent, under a court order or subpoena, for affordable-housing compliance audits, for background or credit screening, for repairs or utility coordination, when responding to another landlord's reference request, or in insurance, collections, or court proceedings.

What happens if a landlord knowingly violates this law?

Statutory damages equal to twice the monthly rent of the tenancy or prospective tenancy involved.

Does this law prevent normal tenant screening?

No. Background and credit screening is one of the law's specifically listed exceptions.

Who is covered by this law?

Current tenants, former tenants, rental applicants, and their household members.