(1) When a school administrator as defined in ORS § 419A.305 receives notice under ORS § 339.317, 339.319, 339.321, 419A.015, 420.048 or 420A.122, the school administrator may disclose the information only to school personnel, as defined in ORS § 339.326, who the school administrator determines need the information in order to safeguard the safety and security of the school, students and staff. A person to whom personally identifiable information is disclosed under this subsection may not disclose the information to another person except to carry out the provisions of this subsection.

(2) A school administrator or anyone employed by or acting on behalf of a school administrator who receives notice under ORS § 339.317, 339.319, 339.321 or 420A.122 is not civilly or criminally liable for failing to disclose the information. [1999 c.620 § 6; 2008 c.50 § 7; 2009 c.447 § 6]