(1) The Oregon Health Authority shall develop and maintain a database of information related to the production of marijuana by persons designated to produce marijuana by a registry identification cardholder, the processing of marijuana by a marijuana processing site under ORS § 475C.815 and the transfer of usable marijuana, medical cannabinoid products, cannabinoid concentrates and cannabinoid extracts by medical marijuana dispensaries under ORS § 475C.833. At a minimum, the database must include the information submitted to the authority under ORS § 475C.795, 475C.821 and 475C.843.

(2)(a) Subject to paragraph (c) of this subsection, the authority may provide information that is stored in the database developed and maintained under this section to a law enforcement agency.

(b) Subject to paragraph (c) of this subsection, the authority may provide information that is stored in the database developed and maintained under this section to the regulatory agencies of a city or county.

(c) The authority may not disclose:

(A) Any personally identifiable information related to a registry identification cardholder or a designated primary caregiver that is stored in the database developed and maintained under this section.

(B) Any information related to the amount and type of usable marijuana, medical cannabinoid products, cannabinoid concentrates and cannabinoid extracts transferred to or by persons designated to produce marijuana by a registry identification cardholder, marijuana processing sites or medical marijuana dispensaries.

(3) Nothing in this section prevents a law enforcement agency from lawfully obtaining information that is stored in the database developed and maintained under this section by subpoena. [Formerly 475B.879]