(a) The duty of care;
(b) The duty of loyalty; and
(c) The duty of confidentiality.
(2) A fiduciary’s or designated recipient’s authority with respect to a digital asset of a user:
(a) Except as otherwise provided in ORS 119.016, is subject to the applicable terms of service;
(b) Is subject to other applicable law, including copyright law;
(c) In the case of a fiduciary, is limited by the scope of the fiduciary’s duties; and
(d) May not be used to impersonate the user.
(3) A fiduciary with authority over the property of a decedent, protected person, principal or settlor has the right to access any digital asset in which the decedent, protected person, principal or settlor has a right or interest and that is not held by a custodian or subject to a terms-of-service agreement.
(4) A fiduciary acting within the scope of the fiduciary’s duties is an authorized user of the property of the decedent, protected person, principal or settlor for the purpose of applicable computer fraud and unauthorized computer access laws, including this state’s laws on unauthorized computer access.
(5) A fiduciary with authority over the tangible, personal property of a decedent, protected person, principal or settlor:
(a) Has the right to access the property and any digital asset stored in the property; and
(b) Is an authorized user for the purpose of computer fraud and unauthorized computer access laws, including this state’s laws on unauthorized computer access.
(6) A custodian may disclose information in an account to a fiduciary of the user when the information is required to terminate an account used to access digital assets licensed to the user.
(7) A fiduciary of a user may request a custodian to terminate the user’s account. A request for termination must be in writing, in either physical or electronic form, and accompanied by:
(a) If the user is deceased, a certified copy of the death certificate of the user;
(b) A certified copy of the letter of appointment of the personal representative, a small estate affidavit or court order, a court order, a power of attorney or a trust giving the fiduciary authority over the account; and
(c) If requested by the custodian:
(A) A number, user name, address or other unique subscriber or account identifier assigned by the custodian to identify the user’s account;
(B) Evidence linking the account to the user; or
(C) A finding by the court that the user had a specific account with the custodian, identifiable by the information specified in subparagraph (A) of this paragraph. [2016 c.19 §15]