The Oregon Health Authority may require a person requesting prescription monitoring program information under ORS 431A.865 (Disclosure of information) (3)(b) to enter into a data use agreement under which the person:
Describes the proposed use for the information;
Agrees to any terms and conditions imposed on transferring the information;
Agrees to any limitations imposed on using the information;
Agrees to any terms and conditions imposed on keeping the information; and
Agrees to destroy the information after completing the proposed use for the information.
In determining whether to enter into an agreement under this section, the authority shall:
Ensure that the agreement will benefit the health and safety of Oregonians;
Determine whether the person making the request has the technical competence needed to meet any terms, conditions or limitations imposed under subsection (1) of this section and the ability to complete the proposed use for the information;
If the proposed use for the information involves research, ensure that the proposed use has been approved by any involved institutional review board; and
Consider any other factor that the authority determines is relevant.
Using the factors described in subsection (2) of this section, the authority shall evaluate any agreement entered into under this section at least once per year for the purpose of determining whether to renew the agreement. [2017 c.683 §18; 2019 c.470 §11; 2019 c.583 §19]