OAR 836-080-0675
Disclosure Without Authorization
(1)
The nonaffiliated third party’s only use of the information will be in connection with the marketing of a product or service.(2)
No information relating to an individual’s character, personal habits, mode of living or general reputation may be disclosed, and no classification derived from such information may be disclosed.(3)
Prior to disclosure, the individual must have been given the notice described in OAR 836-080-0620 (Notice of Personal Financial Information Practices) and, at the same time, an opportunity to decide whether to allow disclosure of the information by means of a clear and conspicuous notice that provides the following:(a)
That the licensee discloses or reserves the right to disclose personal financial information about the individual to a nonaffiliated third party;(b)
That the individual has the right to opt out of that disclosure; and(c)
A reasonable means by which the individual may exercise the opt out right.(4)
Disclosure of personal financial information that is also individually identifiable health information is not prohibited or otherwise regulated under the federal Health Insurance Portability and Accountability Act of 1996 (P.L. 104-191).
Source:
Rule 836-080-0675 — Disclosure Without Authorization, https://secure.sos.state.or.us/oard/view.action?ruleNumber=836-080-0675
.