Or. Admin. R. 409-022-0070 - Limited Data Sets with a Data Use Agreement

The Office for Oregon Health Policy and Research may authorize the disclosure of health data in accordance with a data use agreement entered into by the office and a researcher for purposes of research, public health, or health care operations.  A limited data set excludes specified direct identifiers of the individual or of relatives, employers, or household members of the individual.  The data use agreement must do the following:

• Establish the permitted uses and disclosures of the limited data set;
• Limit who can use or receive the data; and
• Require the researcher to agree to the following:
  • Not make unauthorized use or disclosure of the information;
  • Use appropriate safeguards to prevent unauthorized use or disclosure of the information;
  • Report to the covered entity any unauthorized use or disclosure of the information;
  • Not identify the information or contact the individual; and
  • Ensure that any agents to whom he provides the limited data set agree to these same restrictions and conditions.