OAR 333-049-0040: Collection and Release of Information

(1) The IIS may collect information for a client's immunization record from any authorized user. Such information to be collected shall be determined by the program and provided to the IIS in a format provided by the program. (2) The IIS may collect information for a client's tracking and recall record from any authorized user. Information to be collected includes such information necessary to contact the client or the parent or the guardian of a client by electronic mail, phone or mail. Such information shall be determined by the program and provided to the tracking and recall system in a format provided by the program. (3) The program may receive information from other Immunization Information Systems and may share information with other such IISs, provided that the manager determines that other IISs have confidentiality protection at least equivalent to those under ORS 433.090 through 433.102 and these rules. The manager shall prescribe the information that may be shared and the format for sharing information to and from other IISs. (4) The program may release and publish information in the IIS in an aggregate form that does not identify a client.