OAR 333-049-0100: Confidentiality

(1) Personal identifying information from the IIS shall only be disclosed to authorized users. (2) An authorized user shall not disclose information from the IIS except to another authorized user. (3) Any request for the limitations on the transfer of information from the immunization record or the immunization tracking and recall record shall be confidential. (4) All providers with access to the IIS shall provide to the program an agreement signed by such providers or their authorized agent. The agreement shall be in a form prescribed by the program and may include provisions to maintain the confidentiality of the information in the IIS, and to only access information on clients under the care of such persons.