Oregon Revised Statutes Insurance § 741.008

(a) In which the person is providing information technology services and has control over, or access to, information technology systems that would allow the person to harm the information technology systems or the information contained in the systems;

(b) In which the person has access to information that is confidential or for which state or federal laws, rules or regulations prohibit disclosure;

(c) That has payroll functions or in which the person has responsibility for receiving, receipting or depositing money or negotiable instruments, for billing, collections or other financial transactions or for purchasing or selling property or has access to property held in trust or to private property in the temporary custody of the department;

(d) That has mailroom duties as a primary duty or job function;

(e) In which the person has responsibility for auditing the department;

(f) That has personnel or human resources functions as a primary responsibility;

(g) In which the person has access to Social Security numbers, dates of birth or criminal background information; or

(h) In which the person has access to tax or financial information about individuals or business entities.