Oregon Revised Statutes Education and Culture § 339.323

(1) When a school administrator as defined in ORS 419A.305 receives notice under ORS 339.317, 339.319, 339.321, 419A.015, 420.048 or 420A.122, the school administrator may disclose the information only to school personnel, as defined in ORS 339.326, who the school administrator determines need the information in order to safeguard the safety and security of the school, students and staff. A person to whom personally identifiable information is disclosed under this subsection may not disclose the information to another person except to carry out the provisions of this subsection.

(2) A school administrator or anyone employed by or acting on behalf of a school administrator who receives notice under ORS 339.317, 339.319, 339.321 or 420A.122 is not civilly or criminally liable for failing to disclose the information.