2023 Oregon Revised Statutes › Volume : 18 - Financial Institutions, Insurance › Chapter 746 - Trade Practices › Section 746.640 - Access to recorded personal information.

(1) If any individual, after proper identification, submits a written request to an insurer, insurance producer or insurance-support organization for access to recorded personal information about the individual that is reasonably described by the individual and reasonably locatable and retrievable by the insurer, insurance producer or insurance-support organization, the insurer, insurance producer or insurance-support organization within 30 business days from the date the request is received shall:
(a) Inform the individual of the nature and substance of the recorded personal information in writing, by telephone or by other oral communication, whichever the insurer, insurance producer or insurance-support organization prefers;
(b) Permit the individual to see and copy, in person, the recorded personal information or to obtain a copy of the recorded personal information by mail, whichever the individual prefers, unless the recorded personal information is in coded form, in which case an accurate translation in plain language shall be provided in writing;
(c) Disclose to the individual the identity, if recorded, of the persons to whom the insurer, insurance producer or insurance-support organization has disclosed the recorded personal information within two years prior to the request, and if such identity is not recorded, the names of the insurers, insurance producers, insurance-support organizations and other persons to whom such information is normally disclosed; and
(d) Provide the individual with a summary of the procedures by which the individual may request correction, amendment or deletion of recorded personal information.
(2) Any personal information provided pursuant to this section must identify the source of the information if the source is an institutional source.
(3) If an individual requests individually identifiable health information supplied by a health care provider, the insurer, insurance producer or insurance-support organization shall provide the information, including the identity of the health care provider either directly to the individual or to a health care provider designated by the individual and licensed to provide health care with respect to the condition to which the information relates, whichever the insurer, insurance producer or insurance-support organization prefers. If the insurer, insurance producer or insurance-support organization elects to disclose the information to a health care provider designated by the individual, the insurer, insurance producer or insurance-support organization shall notify the individual, at the time of the disclosure, that the insurer, insurance producer or insurance-support organization has provided the information to the health care provider.
(4) Except for personal information provided under ORS 746.650, an insurer, insurance producer or insurance-support organization may charge a reasonable fee to cover the costs incurred in providing a copy of recorded personal information to an individual.
(5) The obligations imposed by this section upon an insurer or insurance producer may be satisfied by another insurer or insurance producer authorized to act on its behalf. With respect to the copying and disclosure of recorded personal information pursuant to a request under this section, an insurer, insurance producer or insurance-support organization may make arrangements with an insurance-support organization or a consumer reporting agency to copy and disclose recorded personal information on its behalf.
(6) The rights granted to individuals by this section shall extend to all natural persons to the extent personal information about them is collected and maintained by an insurer, insurance producer or insurance-support organization in connection with an insurance transaction. The rights granted to all natural persons by this subsection shall not extend to personal information about them that relates to and is collected in connection with or in reasonable anticipation of a claim or a civil or criminal proceeding involving them.
(7) For purposes of this section, the term "insurance-support organization" does not include "consumer reporting agency." [1981 c.649 §10; 2003 c.87 §13; 2003 c.364 §159a]