ORS 676.177 Disclosure of confidential information to another public entity; criteria; exception

For purposes of this section, “public entity” means:

A board or agency of this state, or a board or agency of another state with regulatory or enforcement functions similar to the functions of a health professional regulatory board of this state;

A district attorney;

The Department of Justice;

A state or local public body of this state that licenses, franchises or provides emergency medical services; or

A law enforcement agency of this state, another state or the federal government.

Notwithstanding any other provision of ORS 676.165 to 676.180 and except as provided in subsection (5) of this section, a health professional regulatory board, upon a determination by the board that it possesses otherwise confidential information that reasonably relates to the regulatory or enforcement function of another public entity, may disclose that information to the other public entity.

Any public entity that receives information pursuant to subsection (2) of this section shall agree to take all reasonable steps to maintain the confidentiality of the information, except that the public entity may use or disclose the information to the extent necessary to carry out the regulatory or enforcement functions of the public entity.

Notwithstanding subsections (2) and (3) of this section, the Oregon Board of Physical Therapy may disclose information described in subsection (2) of this section to the Physical Therapy Compact Commission established in ORS 688.240.

A health professional regulatory board may not disclose the information described in subsection (2) of this section to another public entity if the information relates to the provision of or referral for reproductive or gender-affirming health care services.

A health professional regulatory board may disclose to the Oregon Health Authority information described in subsection (2) of this section. The authority shall take all reasonable steps to maintain the confidentiality of any information received under this subsection, except that the authority may use the information to the extent necessary to carry out its regulatory or enforcement functions under ORS 475A.210 to 475A.722.