Section 475C.859 - Database of information related to cardholders(1)(a) The Oregon Health Authority shall establish and maintain a list of:(A) The names of persons to whom a registry identification card has been issued under ORS 475C. 783;(B) The names of persons designated as primary caregivers under ORS 475C. 789; and(C) The addresses of marijuana grow sites registered under ORS 475C. 792.(b) Except as provided in subsection (2) of this section, the list is confidential and not subject to public disclosure under ORS 192.311 to 192.478.(c) The authority shall develop a system by which authorized employees of state and local law enforcement agencies may verify that: (A) A person lawfully possesses a registry identification card;(B) A person is the designated primary caregiver of a lawful possessor of a registry identification card; or(C) A location is a registered marijuana grow site.(2) Names, addresses and other identifying information from the list established and maintained pursuant to subsection (1) of this section may be released to:(a) Authorized employees of the authority as necessary to perform official duties of the authority.(b) Authorized employees of state or local law enforcement agencies who provide to the authority adequate identification, but only as necessary to verify that: (A) A person lawfully possesses a registry identification card;(B) A person is the designated primary caregiver of a lawful possessor of a registry identification card; or(C) A location is a registered marijuana grow site.(3) Authorized employees of state or local law enforcement agencies who obtain identifying information as authorized by this section may not release or use the information for any purpose other than to verify that:(a) A person lawfully possesses a registry identification card;(b) A person is the designated primary caregiver of a lawful possessor of a registry identification card; or(c) A location is a registered marijuana grow site.(4) In addition to releasing information to authorized employees of state or local law enforcement agencies for purposes of verifying information under subsection (2)(b) of this section, the authority may release to authorized employees of state or local law enforcement agencies the minimum amount of information necessary to enable an employee to determine whether an individual or location is in compliance with a provision of ORS 475C. 770 to 475C. 919 or a rule adopted under ORS 475C. 770 to 475C. 919.(5) If the authority determines, after conducting an investigation or receiving a complaint of an alleged violation of a provision of ORS 475C. 770 to 475C. 919 or a rule adopted under ORS 475C. 770 to 475C. 919, that a violation of a provision of ORS 475C. 770 to 475C. 919 or a rule adopted under ORS 475C. 770 to 475C. 919 has occurred, the authority may provide information obtained by the authority, except for information related to a registry identification cardholder's debilitating condition, to authorized employees of state or local law enforcement agencies, or to another state or local government agency with jurisdiction over the matter.