Oregon Revised Statutes Public Health and Safety § 432.540

(1) The Oregon Health Authority shall adopt rules under which confidential data may be used by third parties to conduct research and studies for the public good. Research and studies conducted using confidential data from the statewide registry must be reviewed and approved by the Committee for the Protection of Human Research Subjects established in accordance with 45 C.F.R. 46.

(2) The authority may enter into agreements to exchange information with other registries for cancer and benign tumors of the brain and central nervous system in order to obtain complete reports of Oregon residents diagnosed or treated in other states and to provide information to other states regarding the residents of other states diagnosed or treated in Oregon. Prior to providing information to any other registry, the authority shall ensure that the recipient registry has comparable confidentiality protections.