https://olis.oregonlegislature.gov/liz/2021R1/Measures/Overview/HB3284
Relating to protecting the privacy of the personal health data of residents of this state; and declaring an emergency.
Catchline/Summary:
Prohibits covered organization from collecting, using or disclosing personal health data about resident individual who has not given affirmative express consent for collection, use or disclosure unless in context of employment relationship or to comply with legal obligation, or unless personal health data was lawfully available to public from federal, state or local government records, was collected before emergency period for reasons other than tracking, monitoring or tracing resident individual’s exposure to or infection by SARS-CoV-2 or COVID-19 or has been deidentified in accordance with federal law.