ORS 475C.862: Confidentiality of personally identifiable information.

(1) Any personally identifiable information, as defined in ORS 432.005, other than a name of an individual or an address submitted with an application under ORS 475C.815 or 475C.833, that the Oregon Health Authority collects and maintains for purposes of registering a marijuana grow site under ORS 475C.792, a marijuana processing site under ORS 475C.815, or a medical marijuana dispensary under ORS 475C.833, is confidential and not subject to public disclosure under ORS 192.311 to 192.478, except that the authority may provide personally identifiable information to a person registered under ORS 475C.770 to 475C.919 if the registrant requests the information and the information is related to a designation made under ORS 475C.770 to 475C.919.

      (2) Any personally identifiable information, as defined in ORS 432.005, submitted to the authority under ORS 475C.795, 475C.821 or 475C.843 or pursuant to ORS 475C.856 is confidential and not subject to public disclosure under ORS 192.311 to 192.478.

      (3) Any record that the authority keeps or maintains for purposes related to the installation or maintenance of a security system by a medical marijuana dispensary pursuant to rules adopted under ORS 475C.833 (10) is confidential and not subject to public disclosure under ORS 192.311 to 192.478.