Oregon Administrative Rules
Chapter 836 - DEPARTMENT OF CONSUMER AND BUSINESS SERVICES, INSURANCE REGULATION
Division 80 - TRADE PRACTICES
Section 836-080-0675 - Disclosure Without Authorization
Current through Register Vol. 63, No. 9, September 1, 2024
Unless disclosure is otherwise permitted pursuant to OAR 836-080-0665 or 836-080-0670, a licensee may disclose personal financial information about an individual to a nonaffiliated third party without obtaining the written authorization required by 836-080-0665 only if all of the following conditions are met:
(1) The nonaffiliated third party's only use of the information will be in connection with the marketing of a product or service.
(2) No information relating to an individual's character, personal habits, mode of living or general reputation may be disclosed, and no classification derived from such information may be disclosed.
(3) Prior to disclosure, the individual must have been given the notice described in OAR 836-080-0620 and, at the same time, an opportunity to decide whether to allow disclosure of the information by means of a clear and conspicuous notice that provides the following:
(4) Disclosure of personal financial information that is also individually identifiable health information is not prohibited or otherwise regulated under the federal Health Insurance Portability and Accountability Act of 1996 (P.L. 104-191).
Stat. Auth.: ORS 731.244 & 746.608
Stats. Implemented: ORS 746.600 & 746.607
