WeVote
Log In

Bill

Bill

HB 2812

Relating to individually identifiable health information disclosure.

2025 Regular Session

Oregon HB 2812 restricts disclosure of individually identifiable health information and takes effect January 1, 2026, establishing new privacy protections and potential penalties for unauthorized medical data sharing.

Chapter 58, (2025 Laws): Effective date January 1, 2026.
0
WeVote Research Nonpartisan
Bill Summary · HB 2812

Legislative bill overview

HB 2812 establishes new regulations governing the disclosure of individually identifiable health information in Oregon. The bill became law on May 12, 2025, and takes effect January 1, 2026, creating requirements and limitations around how health information can be shared and used by covered entities.

Why is this important

Health information privacy directly affects patient rights and medical autonomy. This law will determine what protections Oregonians have regarding their medical records, who can access that information, and under what circumstances—impacting everything from insurance practices to research activities and law enforcement requests.

Potential points of contention

  • Scope of "individually identifiable" definition – How narrowly or broadly the law defines what constitutes protected health information may create disputes over what information requires consent or notification before disclosure
  • Balance between privacy and utility – Restrictions on health data sharing could limit legitimate medical research, public health surveillance, and care coordination while protecting privacy
  • Enforcement mechanisms and penalties – The bill's approach to violating disclosure rules (civil liability, administrative fines, private rights of action) will affect how strongly entities comply and how easily individuals can seek remedies

Compiled from official sources — confirm details with the bill’s official record.

Sign in to ask a question.