ORS § 444.330
All identifying information regarding individual children that is reported to the Oregon Health Authority pursuant to ORS 444.300 to 444.330 shall be confidential and privileged. Except as required in connection with the administration or enforcement of public health laws or rules, no public health official, employee, agent or other person entitled to access or use data under ORS 444.300 to 444.330 shall be examined in an administrative or judicial proceeding as to the existence or contents of data in the database established under ORS 444.300 to 444.330. Research and studies conducted using confidential data from the statewide database must be reviewed and approved by the body used by the authority as the Committee for the Protection of Human Research Subjects and established in accordance with 45 C.F.R. 46.
ORS 444.330