OAR 407-014-0300
Scope


These rules (OAR 407-014-0300 (Scope) to 407-014-0320 (User Responsibility)) apply to an organization or individual seeking or receiving access to Department information assets or network and information systems for the purpose of carrying out a business transaction between the Department and the user.

(1)

These rules are intended to complement, and not supersede, access control or security requirements in the Department’s Electronic Data Transmission rules, OAR 407-120-0100 (Definitions) to 407-120-0200 (Department System Administration), and whichever rule is more specific shall control.

(2)

The confidentiality of specific information and the conditions for use and disclosure of specific information are governed by other laws and rules, including but not limited to the Department’s rules for the privacy of protected information, OAR 407-014-0000 (Definitions) to 407-014-0070 (De-identification of Client Information and Use of Limited Data Sets under Data Use Agreements).
Last Updated

Jun. 8, 2021

Rule 407-014-0300’s source at or​.us