justicedao/ipfs_state_laws huggingface dataset:
333-333-4550 Security Requirements (1) A service center, manufacturer or laboratory licensee is responsible for the security of all psilocybin products on the licensed premises or in transit from the licensed premises, including providing adequate safeguards against theft or diversion of psilocybin products. (2) A service center, manufacturer or laboratory licensee is responsible for taking adequate measures to prevent unauthorized access to the licensed premises. Adequate measures include but are not limited to locking or monitoring exterior doors to the licensed premises during business hours. The exterior walls, doors and roof of the licensed premises must be constructed of materials that effectively prevent unauthorized entry. Any measures taken by a service center to prevent unauthorized access must be consistent with the requirements for client administration areas in OAR 333-333-4450. (3) A service center, manufacturer or laboratory licensee is responsible for taking adequate measures to prevent unauthorized access to records and maintain client confidentiality. (4) During hours when the licensee is not operating, the licensee must ensure that all points of ingress and egress to and from indoor areas of the licensed premises are securely locked (5) Licensees must post visible signage identifying limited access areas and ensure that all limited access areas of a licensed premises are accessible only to licensee representatives and other personnel authorized to be present under these rules. (6) The requirements of these rules apply to all licensed premises regardless of whether the licensed premises is located within a building that contains separate unlicensed areas or located at an address that contains separate unlicensed structures. Statutory/Other Authority: ORS 475A.235 Statutes/Other Implemented: ORS 475A.235 History: PH 82-2024, amend filed 11/22/2024, effective 01/01/2025 PH 58-2023, amend filed 12/21/2023, effective 01/01/2024 PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022
333-333-4600 Alarm System (1) A service center, manufacturer or laboratory must have a fully operational security alarm system on the licensed premises, activated at all times when the licensed premises is closed for business. (2) The security alarm system for the licensed premises must: (a) Be able to detect unauthorized entry into interior areas of the licensed premises and unauthorized activity within interior areas of the licensed premises. (b) Notify the licensee, licensee representative or authorized personnel in the event of an unauthorized entry. (c) Have at least two operational “panic buttons” located inside the licensed premises linked with the alarm system that immediately notifies a security company or law enforcement. (3) Upon request, licensees shall make all information related to security alarm systems, monitoring and alarm activity available to the Authority. Statutory/Other Authority: ORS 475A.235 Statutes/Other Implemented: ORS 475A.235 History: PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022
333-333-4620 Required Security Video Recording Equipment (1) A licensed premises must have a fully operational video recording system to ensure security of the licensed premises. (2) Required video recording equipment must, at a minimum: (a) Consist of: (A) Digital or network video recorders. (B) Cameras capable of meeting the requirements of OAR 333-333-4630 and this rule. (C) Video monitors. (D) Digital archiving devices. (E) A minimum of one monitor on premises capable of viewing video. (F) Interface devices, if required to adequately operate system or machinery such as a mouse and keyboard. (b) Have the capability of producing a printable image from any camera image. (c) Have sufficient battery backup to support a minimum of one hour of recording time in the event of a power outage. (3) Except for mounted cameras and video monitors, all required video recording equipment and recordings, must be stored in a locked secure area that is accessible only to authorized licensee representatives, Oregon Health Authority (Authority) employees and contractors, and other state or local government officials that have jurisdiction over some aspect of the licensed premises or licensee. The requirements of this section do not apply to recordings that are stored on a cloud-based platform. (4) Video monitors that are placed outside of the secure area identified in section (3) of this rule must only be viewable by licensee representatives, facilitators, Authority employees and contractors, and other state or local government officials that have jurisdiction over some aspect of the licensed premises or licensee. (5) Video recording equipment may not record audio, unless authorized pursuant to OAR 333-333-4640. Statutory/Other Authority: ORS 475A.235 Statutes/Other Implemented: ORS 475A.235 History: PH 21-2025, amend filed 10/24/2025, effective 01/01/2026 PH 58-2023, amend filed 12/21/2023, effective 01/01/2024 PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022
333-333-4630 Required Security Camera Coverage and Camera Placement (1) A licensed premises is required to have camera coverage, if applicable, for: (a) All points of ingress and egress to and from indoor areas of the licensed premises, unless those points are located within a client administration area. (b) All areas where psilocybin products are stored or produced. (c) All areas where psilocybin waste is required to be stored, destroyed or rendered unusable as required by OAR 333-333-8000. (2) A licensee must ensure that all required cameras are placed so that they capture clear and certain images of any individual and activity occurring: (a) All points of ingress and egress to and from indoor areas of the licensed premises. (b) In all locations on the licensed premises where psilocybin products are produced or stored. Statutory/Other Authority: ORS 475A.235 Statutes/Other Implemented: ORS 475A.235 History: PH 21-2025, amend filed 10/24/2025, effective 01/01/2026 PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022
333-333-4640 Video Recordings of Administration Sessions (1) A service center licensee may not install video recording equipment in client administration areas. Service centers may make video and audio recordings of administration, preparation and integration sessions using portable equipment with the prior written consent provided in a form and manner prescribed by the Oregon Health Authority (Authority) of every client, facilitator and client support person who will be recorded. Service center licensees and facilitators may not permit clients to record administration, preparation and integration sessions using their own recording equipment. No person, including clients, facilitators, licensee representatives or clients support persons, may record an administration, preparation or integration session without obtaining prior written consent as required by this rule. (2) Service centers must make recordings made under this rule available to the clients and facilitators who were recorded to view upon request at the service center’s licensed premises. Service centers must create and maintain records that documents when and to whom recordings are made available. Service centers are prohibited from charging a fee to view recordings. (3) Service centers must securely store recordings made under this rule and may not publish, share or otherwise distribute, to any person, including persons recorded, without the obtaining the prior written consent of every person recorded using the form described in OAR 333-333-4810(3) or as otherwise allowed under ORS 475A.450. (4) Licensee representatives of a service center may only access recordings made under this rule under the following circumstances: (a) To provide access to clients and facilitators who have been recorded. (b) With prior written consent described in section (3) of this rule. (c) To provide access to the Authority or law enforcement when required by ORS 475A.450 or these rules. (5) Service centers must retain recordings made under this rule for a period of five years. If a service center license is revoked, surrendered or expired the Authority may address in an order the manner and condition under which recordings held by the licensee must be maintained, destroyed or transferred to other licensees. (6) Clients, facilitators and client support persons may withdraw their written consent described in section (1) of this rule at any time prior to beginning an administration session. (7) Clients, facilitators and client support persons may withdraw their written consent described in section (3) of this rule at any time. (8) Recordings made under this rule are not subject to OAR 333-333-4620 and OAR 333-333-4630, except that any video recordings of administration sessions in the licensee’s possession must be provided to the Authority upon request. Statutory/Other Authority: ORS 475A.235 & ORS 475A.305 Statutes/Other Implemented: ORS 475A.235 & ORS 475A.305 History: PH 21-2025, amend filed 10/24/2025, effective 01/01/2026 PH 82-2024, amend filed 11/22/2024, effective 01/01/2025 PH 58-2023, amend filed 12/21/2023, effective 01/01/2024 PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022
333-333-4660 Location and Maintenance of Required Security Video Equipment (1) Except as provided in OAR 333-333 4620(3), a service center, manufacturer or laboratory licensee must house the required recording equipment in a designated, locked, and secured room or other enclosure within the licensed premises with access limited to: (a) The licensee, licensee representatives, and authorized personnel. (b) Employees of the Oregon Health Authority (Authority). (c) Service personnel or contractors. (2) A service center, manufacturer or laboratory licensee must keep a current list of all authorized employees and service personnel who have access to the required video recording system and room on the licensed premises. (3) Service center, manufacturer or laboratory licensees must keep a video recording equipment maintenance activity log on the licensed premises to record all service activity for the required video equipment including the identity of any individual performing the service, the service date and time and the reason for service to the video recording system. (4) Service center, manufacturer or laboratory licensees must keep a video recording equipment outage log on the licensed premises to record all camera outages lasting more than 30 minutes for the required video equipment. The log must identify the cameras affected and record time and duration of the outage. (5) Off-site monitoring of the licensed premises by a licensee or an independent third-party is authorized if standards exercised at the remote location meet or exceed all standards for on-site monitoring. Off-site monitoring may not be used to satisfy the requirements of OAR 333-333-5200(4). Statutory/Other Authority: ORS 475A.235 Statutes/Other Implemented: ORS 475A.235 History: PH 21-2025, amend filed 10/24/2025, effective 01/01/2026 PH 58-2023, amend filed 12/21/2023, effective 01/01/2024 PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022
333-333-4700 Duty to Contact Emergency Services (1) Facilitators and service center licensee representatives are required to make reasonable efforts to resolve any activity or conditions on the licensed premises that endangers the safety of any person present on the premises. (2) If activity or conditions on the licensed premises that endanger the safety of any person present on the premises persist following the reasonable efforts required by section (1) of this rule, facilitators and service center licensee representatives must immediately contact appropriate emergency services. (3) If licensee is unable to contact emergency services while the activity is taking place, they must contact emergency services as soon as it is possible to do so. (4) Facilitators and service center licensee representatives must contact emergency medical services, by calling 911, when any person on the licensed premises requires emergency medical care due to an immediate or potential life threat. (5) In addition to the requirements of sections (1), (2), (3) and (4) of this rule, service centers must notify the Oregon Health Authority (Authority) in writing in a form and manner prescribed by the Authority within 48 hours of contacting emergency services and notify the emergency contact identified in the client’s safety and support plan under OAR 333-333-5080 if emergency services were contacted to address a client emergency . Statutory/Other Authority: ORS 475A.235 Statutes/Other Implemented: ORS 475A.235 History: PH 82-2024, amend filed 11/22/2024, effective 01/01/2025 PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022
333-333-4830 Financial and Business Records In addition to any other recordkeeping requirements in these rules, a licensee must have and maintain records that clearly reflect all financial transactions and the financial condition of the licensed entity. The following records may be kept in either paper or electronic form in a manner that prevents unauthorized access and protects confidential employment records. Records required by this rule must be maintained for a five-year period and must be made available for inspection if requested by the Authority: (1) Purchase invoices and supporting documents for items and services purchased for use in the production, processing, research, testing and sale of psilocybin products that include from whom the items were purchased and the date of purchase. (2) Bank statements for any accounts associated with the licensed entity. (3) Accounting and tax records associated with the licensed entity. (4) Documentation of all financial transactions related to the licensed entity, including contracts and agreements for services performed or received that relate to the licensed entity. (5) All employee records, including training. (6) Information relating to the structure and ownership of the entity, including: (a) A list of all individuals and legal entities identified as applicants. (b) For each legal entity identified as an applicant, complete information about the ownership structure of that legal entity. (c) A list of all individuals and legal entities who are entitled to receive a portion of revenue, proceeds, or profits from the licensed entity. Statutory/Other Authority: ORS 475A.235 Statutes/Other Implemented: ORS 475A.235 History: PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022
333-333-4900 Collection and Maintenance of 303 Client Data (1) On and after January 1, 2025, service centers must collect 303 client data in a manner prescribed by the Oregon Health Authority (Authority), consistent with OAR chapter 950, division 30, by using the form published by the Authority on its website prior to beginning an administration session for every client who will participate in an administration session at the licensed premises. (2) Service centers, including licensee representatives described in section (3) of this rule, must store, maintain and destroy 303 client data, including 303 client data that is not reported to the Authority pursuant to OAR 333-333-4910, in a manner that prevents unauthorized access and protects client confidentiality. (3) 303 client data may only be accessed by licensees and licensee representatives of a service center. Service centers may enter into agreements with individuals and organizations to act as licensee representatives for the purpose of collecting, reporting, storing, maintaining and destroying 303 client data. (4) If a service center enters an agreement described in section (3) of this rule, the service center must provide notice to clients, and 303 client data must be stored at the service center or on cloud-based platforms as described OAR 333-333-4820. (5) Prior to beginning an administration session, every client must provide written confirmation, in a form and manner prescribed by the Authority, that the client has had an opportunity to request that 303 client data related to their receipt of psilocybin services be withheld from data submitted to the Authority. (6) A service center must collect 303 client data by using the form described in section (1) from every client, even if a client requests their information be withheld from data submitted to the Authority. (7) Licensee representatives and facilitators are prohibited from encouraging clients to request that their data be withheld from data submitted to the Authority or otherwise influencing a client’s responses to the form described in section (1) of this rule. (8) Failure to comply with this rule is a violation. Statutory/Other Authority: ORS 475A.372 & ORS 413.161 Statutes/Other Implemented: ORS 475A.372 & ORS 413.161 History: PH 82-2024, amend filed 11/22/2024, effective 01/01/2025 PH 58-2023, adopt filed 12/21/2023, effective 01/01/2024
333-333-4920 Sale of Records Licensees may not sell, monetize, or otherwise profit from client records, 303 client data or 303 service center data. Statutory/Other Authority: ORS 475A.235 & ORS 475A.372 Statutes/Other Implemented: ORS 475A.235 & ORS 475A.372 History: PH 73-2024, minor correction filed 09/17/2024, effective 09/17/2024 PH 58-2023, adopt filed 12/21/2023, effective 01/01/2024
333-333-4930 Reporting of Licensee and Applicant Data (1) Every individual licensee and applicant associated with a psilocybin license or application must provide information regarding their race, ethnicity, preferred spoken and written languages, sexual orientation and gender identity of each applicant and licensee in a form and manner prescribed by the Oregon Health Authority. (2) Licensees and applicants who submitted a complete application for a psilocybin license prior to January 1, 2025, must provide the information described in section (1) of this rule on or before March 1, 2025. Failure to do so is a violation. (3) Applicants who submit an application for a psilocybin license on or after January 1, 2025, must provide the information described in section (1) of this rule in order for the application to be considered complete. Statutory/Other Authority: ORS 475A.235 & ORS 475A.374 Statutes/Other Implemented: ORS 475A.235 & ORS 475A.374 History: PH 82-2024, adopt filed 11/22/2024, effective 01/01/2025
333-333-5020 Group Preparation Sessions (1) In addition to the requirements of OAR 333-333-5000 facilitators must inform clients who will participate in a group session of additional considerations for participating in group administration sessions including: (a) Safety considerations related to adverse reactions from other clients in the group, appropriate boundaries, using a consent model when interacting with other clients and appropriate touch between clients as described in OAR 333-333-5230(5). (b) Considerations for groups participating in outdoor administration sessions including an understanding that outdoor groups may be required to stay outdoors regardless of individual client preference. (c) The expectation that clients maintain the confidentiality of other clients participating in group sessions. (2) Clients who will participate in a group administration session must have an opportunity to meet every facilitator who will participate in the group administration session prior to the session commencing. (3) The requirement of section (2) of this rule may be satisfied at any time prior to commencement of the group administration session, including the day of the administration session. Clients must have the opportunity to reschedule their administration session with alternate facilitators after the meetings described in section (2) of this rule. Statutory/Other Authority: ORS 475A.235 & ORS 475A.340 Statutes/Other Implemented: ORS 475A.340 History: PH 21-2025, amend filed 10/24/2025, effective 01/01/2026 PH 82-2024, amend filed 11/22/2024, effective 01/01/2025 PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022
333-333-5075 Culturally and Linguistically Responsive Services (1) Service centers and facilitators must create and maintain: (a) Documentation of culturally and linguistically responsive services, if any, offered to clients that support client safety and access to services. (b) Plans for identifying translation and interpretation resources and referring clients to other facilitators or service centers if the licensee is not able to provide culturally and linguistically responsive services requested by a client. (2) Service centers and facilitators must share information regarding culturally and linguistically responsive services they offer, if any, with clients and prospective clients upon request in order to allow clients and prospective clients to make informed decisions about choosing a service center and facilitator that meets their individual needs. Statutory/Other Authority: ORS 475A.235 & ORS 475A.340 Statutes/Other Implemented: ORS 475A.235 & ORS 475A.340 History: PH 82-2024, adopt filed 11/22/2024, effective 01/01/2025
333-333-5080 Safety and Support Plans (1) A facilitator must work with every client who will participate in an administration session to draft a safety and support plan in a form and manner prescribed by the Oregon Health Authority. Safety and support plans must identify risks and challenges specific to the client’s circumstances and resources available to mitigate those risks and challenges, including any culturally and linguistically responsive services requested by the client and the client’s existing support network and appropriate external resources. (2) Safety and support plans must include contact information for a person to be contacted in the event the client experiences a medical or other emergency. (3) Safety and support plans may not be changed during an administration session. (4) Client records described by this rule must be stored at the service center where the client participates or intends to participate in an administration session or on cloud-based platforms as required by OAR 333-333-4820. Statutory/Other Authority: ORS 475A.235 & ORS 475A.340 Statutes/Other Implemented: ORS 475A.340 History: PH 82-2024, amend filed 11/22/2024, effective 01/01/2025 PH 58-2023, amend filed 12/21/2023, effective 01/01/2024 PH 206-2022, adopt filed 12/27/2022, effective 12/27/2022