Or. Rev. Stat. § 746.665 - Limitations and conditions on disclosure of certain information

A licensee or insurance-support organization may disclose personal or privileged information about an individual collected or received with an insurance transaction under the following circumstances:

• Disclosure is authorized in writing by the individual;
• Disclosure is reasonably necessary for the performance of a business, professional or insurance function for the disclosing organization;
• Disclosure is reasonably necessary to detect or prevent fraud;
• Disclosure is reasonably necessary to inform an individual of a medical problem of which he may not be aware;
• Disclosure is required or permitted by law;
• Disclosure is for the purpose of actuarial or research studies if no individual may be identified in any resulting report;
• Disclosure is to a nonaffiliated third party who will use of the information for marketing of a product or service, if no privileged or personal information is disclosed;
• Disclosure is to an affiliate whose only use of the information will be in connection with an audit of the licensee or the marketing of a financial product or service;
• Disclosure is to a professional peer review organization for the purpose of reviewing the service or conduct of a health care provider.