(1) An authorized user and the employees or agents of an authorized user are not liable for sharing information from the immunization record or using information from the immunization tracking and recall record for purposes of tracking immunizations of clients and for outreach to clients who have missed immunizations.
(2) Information in an immunization registry or in the immunization tracking and recall record or derived from the registry or record is confidential and may not be disclosed to any person who is not specifically authorized to receive information under ORS 433.090 to 433.102.
(3) When a client who is 18 years of age or older requests in writing that the client’s immunization record be removed from an immunization registry, the agency that maintains the registry shall purge the client’s immunization record from the registry as soon as is reasonably possible.
(4) Before sharing data with any immunization registry, an immunization registry maintained in Oregon must ensure that the immunization registry receiving the data has confidentiality and security policies at least as stringent as the policies of the registry sharing the data. [1993 c.297 §8; 2003 c.573 §3; 2007 c.196 §5]
Section: Previous 433.075 433.080 433.085 433.090 433.092 433.094 433.096 433.098 433.100 433.102 433.104 433.105 433.106 433.110 433.115 NextLast modified: August 7, 2008