Oregon Revised Statutes Alcoholic Liquors; Controlled Substances; Drugs § 475B.462

(1) Any personally identifiable information, as defined in ORS 432.005, other than a name of an individual or an address submitted with an application under ORS 475B.435 or 475B.450, that the Oregon Health Authority collects and maintains for purposes of registering a marijuana grow site under ORS 475B.420, a marijuana processing site under ORS 475B.435, or a medical marijuana dispensary under ORS 475B.450, is confidential and not subject to public disclosure under ORS 192.410 to 192.505, except that the authority may provide personally identifiable information to a person registered under ORS 475B.400 to 475B.525 if the registrant requests the information and the information is related to a designation made under ORS 475B.400 to 475B.525.

(2) Any personally identifiable information, as defined in ORS 432.005, submitted to the authority under ORS 475B.423, 475B.438 or 475B.453 or pursuant to ORS 475B.458 is confidential and not subject to public disclosure under ORS 192.410 to 192.505.

(3) Any record that the authority keeps or maintains for purposes related to the installation or maintenance of a security system by a medical marijuana dispensary pursuant to rules adopted under ORS 475B.450 (10) is confidential and not subject to public disclosure under ORS 192.410 to 192.505.