The Oregon Department of Transportation was part of a global hack last year that affected the data of about 3.5 million people with Oregon IDs or driver’s licenses. The information involved in the breach included dates of birth, physical addresses and the last four digits of Social Security numbers. 

Earlier this year, two Oregonians filed a lawsuit over the data breach. They say the state failed to protect the personal information of residents. 

How should government agencies be thinking about protecting sensitive data? What can the U.S. learn from other countries and their data practices? We dig into these issues with Rohan Grey, an assistant professor at Willamette University College of Law.