Law / United States /
Oregon
Oregon insurance information practices, disclosure for actuarial or research studies
In force.
A de-identification rule binding private bodies.
- Obligation class
- Prohibition
- Audit expectation
- none
What it requires
- If you are an insurance licensee or insurance-support organization, disclose personal or privileged information about an individual for an actuarial or research study only if no individual may be identified in any resulting actuarial or research report (ORS 746.665(1)(i)(A)).
- Make sure materials that allow the individual to be identified are returned or destroyed as soon as they are no longer needed (ORS 746.665(1)(i)(B)).
- Have the actuarial or research organization agree not to disclose the information unless the disclosure would otherwise be permitted by ORS 746.665 if made by a licensee or insurance-support organization (ORS 746.665(1)(i)(C)).
- This condition does not apply to a health insurer (ORS 746.609).
These lines are LexLint's reading of the law's text.
What record it asks for
Logging duty
ORS 746.665(1)(i) sets a condition on a disclosure for actuarial or research studies. It names no log or record the licensee keeps and no retention period.
- Kind
- None
- As of
What this law does
ORS 746.665(1)(i) allows a licensee or insurance-support organization to disclose personal or privileged information about an individual, collected or received in connection with an insurance transaction, for actuarial or research studies only if no individual may be identified in any resulting actuarial or research report.
The same condition requires that materials allowing the individual to be identified are returned or destroyed as soon as they are no longer needed, and that the actuarial or research organization agrees not to disclose the information unless the disclosure would otherwise be permitted by ORS 746.665. ORS 746.609 provides that ORS 746.665 does not apply to health insurers.
When LexLint raises it
When your app profile says your app is an insurer, processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .