ORS 802.177 Prohibition on release of personal information from motor vehicle records. (as amended : Chap .24 1999 Session Laws [HB 2191])

---

802.177 Prohibition on release of personal information from motor vehicle records. Except as otherwise provided in ORS 802.179, neither the Department of Transportation nor any officer, employee or contractor of the department may knowingly disclose or otherwise make available to any person personal information about an individual that is obtained by the department in connection with a motor vehicle record. [1997 c.678 s.3]
802.179 Exemptions from prohibition on release of personal information from motor vehicle records. (1) The Department of Transportation, upon request or as required by law, shall disclose personal information from a motor vehicle record to a government agency for use in carrying out its governmental functions.

(2) The department shall disclose personal information from a motor vehicle record for use in connection with matters of motor vehicle or driver safety and theft, motor vehicle emissions, motor vehicle product alterations, recalls or advisories, performance monitoring of motor vehicles and dealers by motor vehicle manufacturers, and removal of nonowner records from the original owner records of motor vehicle manufacturers to carry out the purposes of any of the following federal Acts:

(a) The Automobile Information Disclosure Act.
(b) The Motor Vehicle Information and Cost Saving Act.
(c) The National Traffic and Motor Vehicle Safety Act of 1966.
(d) The Anti-Car Theft Act of 1992.
(e) The Clean Air Act.

(3)(a) If the department determines that a business is a legitimate business, the department shall disclose personal information to the business for use in the normal course of business in:

(A) Verifying the accuracy of personal information submitted to the business; or
(B) Correcting personal information submitted to the business, but only in order to:
(i) Prevent fraud;
(ii) Pursue legal remedies against the individual who submitted the personal information; or
(iii) Recover a debt from, or satisfy a security interest against, the individual.
(b) The department shall adopt rules specifying the kind of information that the department will accept as evidence that a business is a legitimate business.

(4) The department shall disclose personal information to:

(a) An attorney, a financial institution as defined in ORS chapter 706 or a collection agency registered under ORS 697.031 for use in connection with a civil, criminal, administrative or arbitration proceeding in any court, government agency or self-regulatory body. Permissible uses of personal information under this paragraph include but are not limited to service of process, investigation in anticipation of litigation and the execution and enforcement of judgments and orders.

(b) A process server acting as an agent for an individual for use in serving documents in connection with an existing civil, criminal, administrative or arbitration proceeding, or a judgment or decree, in any court, government agency or self-regulatory body. Nothing in this paragraph limits the activities of a process server when acting as an agent for an attorney, collection agency or like person or for a government agency.

(5) The department shall disclose personal information other than names to a researcher for use in researching health and educational questions and providing statistical reports, as long as the personal information is not published, redisclosed or used to contact individuals. The department may disclose information under this subsection only for research sponsored by an educational institution or a health research institution.

(6) The department shall disclose personal information to an insurer, an insurance support organization or a self-insured entity in connection with claims investigation activities, antifraud activities, underwriting or rating.

(7) The department shall disclose personal information regarding ownership or other financial interests in a vehicle to a person who is required by the state or federal Constitution, a statute or an ordinance to give notice to another person concerning the vehicle. Personal information disclosed under this subsection may be used only for giving the required notice. Persons authorized to receive personal information under this subsection include, but are not limited to:
(a) Tow companies;
(b) Persons who have or are entitled to have liens on the vehicle; and
(c) Persons taking an action that could affect ownership rights to the vehicle.

(8) The department shall disclose personal information to any private security officer certified under ORS 181.878, to be used for the purpose of determining ownership of vehicles parked in a place over which the private security officer, acting within the scope of the officer's employment, exercises control.

(9) The department shall disclose personal information to the employer of an individual who holds a commercial driver license, or the insurer of the employer, to obtain or verify information about the holder of the commercial driver license.

(10) The department shall disclose personal information to the operator of a private toll facility for use in collecting tolls.

(11) The department shall disclose personal information for bulk distributors of surveys, marketing materials or solicitations as provided in this subsection. The department shall implement methods and procedures to ensure all of the following:
(a) That individuals are offered an opportunity to request that personal information about themselves not be disclosed to bulk distributors. The opportunity to prohibit disclosure under this subsection must be presented by the department in a clear and conspicuous manner at the time of application for issuance and renewal of a driver permit, driver license, identification card, vehicle title or vehicle registration.
(b) That personal information about a person who submits a request under paragraph (a) of this subsection will be excluded from any lists compiled and sold or otherwise supplied by the department to bulk distributors.
(c) That the personal information provided by the department will be used, rented or sold solely for bulk distribution of surveys, marketing materials and solicitations.

(12) The department shall disclose personal information to a person who requests the information if the requester provides the department with written permission from the individual whose personal information is requested. The written permission from the individual must be notarized.

(13) The department shall disclose personal information to a person who is in the business of disseminating such information under the following conditions:
(a) In addition to any other requirements under the contract executed pursuant to paragraph (b) of this subsection, the person requesting the information must file a performance bond with the the department in the amount of $25,000. The bond must be executed in favor of the State of Oregon and its form is subject to approval by the Attorney General.
(b) The disseminator shall enter into a contract with the department. A contract under this paragraph shall contain at least the following provisions:
(A) That the disseminator will not reproduce or distribute the personal information in bulk but only in response to an individual record inquiry.
(B) That the disseminator will provide the personal information only as provided in ORS 802.181.
(C) That the disseminator will have a method of ensuring that the disseminator can delay for a period of up to two days the giving of personal information to a requester who is not a subscriber.

(14) The department shall disclose personal information to representatives of the news media for the gathering or dissemination of information related to the operation of a motor vehicle or to public safety.

(15) The department shall disclose personal information as provided in ORS 802.220 (5).

(16) The department shall adopt rules providing for the release of personal information from motor vehicle records to a person who has a financial interest in the vehicle. Rules adopted under this subsection may include, but need not be limited to, rules establishing procedures for the department to verify the financial interest of the person making the request for personal information.

(17) The department shall adopt rules providing for the release of personal information from motor vehicle records to a person who is injured {--or endangered--} by the unsafe operation of a vehicle or who owns property that is damaged because of the unsafe operation of a vehicle.

(18) The department shall disclose personal information to a private investigator licensed by any licensing authority within the State of Oregon, to be used for any purpose permitted any person under this section. A licensed private investigator requesting information must prove to the department that the person has a surety bond in the minimum amount of $5,000. [1997 c.678 s.4]

Note: Section 14, chapter 678, Oregon Laws 1997, provides:
Sec. 14. If a person submitted a request prior to the effective date of this Act [September 13, 1997] to have the person's name and address excluded from lists compiled by the Department of Transportation, as authorized by ORS 802.222 (1997 Edition), then the person shall be considered to have requested under section 4 (11) of this Act [802.179 (11)] that personal information from the records of the department not be disclosed to bulk distributors, and the department shall refuse to disclose the personal information to bulk distributors. [1997 c.678 s.14]

802.180 [1983 c.338 s.135; 1993 c.751 s.13; repealed by 1997 c.583 s.9]

802.181 Redisclosure by authorized recipients of personal information from motor vehicle records. (1) Except as otherwise provided in subsections (2) to (5) of this section, a person or government agency that is authorized under ORS 802.179 to receive personal information from motor vehicle records may resell or redisclose the information only to a person {++or government agency++} authorized to receive it under ORS 802.179 and only for purposes authorized under ORS 802.179.

(2) A researcher who receives personal information under ORS 802.179 (5) may not resell or redisclose the information except as provided in ORS 802.179 (5).

(3) A person who receives personal information under ORS 802.179 (11) may not resell or redisclose the information except as provided in ORS 802.179 (11).

(4) A representative of the news media who receives personal information under ORS 802.179 (14) may not resell or redisclose the information except as provided in ORS 802.179 (14).

(5) No one who receives personal information from the department under ORS 802.179 may sell or redisclose the information to a person who is in the business of disseminating the information.

(6) A person who resells or rediscloses personal information as authorized by this section, other than a representative of the news media, must keep records for a period of five years that identify each person who receives the information and the permitted purpose for which the person received the information. Records kept in accordance with this subsection must be made available to the Department of Transportation on request. [1997 c.678 s.5]
802.183 Fees for and rules regarding release of personal information from motor vehicle records. (1) The Department of Transportation may establish fees reasonably calculated to reimburse it for its actual cost in making personal information available to a person or government agency authorized under ORS 802.179 to obtain the information. Fees established under this subsection are subject to the provisions of ORS 192.440 (3) to (5).

(2) The department may adopt rules specifying conditions that must be met by a person or government agency requesting personal information under ORS 802.179. Such conditions may include but need not be limited to:
(a) Providing reasonable assurance of the identity of the requester;
(b) Providing reasonable assurance of the uses to which the personal information will be put, if applicable;
(c) Showing that the individual whose personal information is to be disclosed has given permission for the disclosure, if permission is required; and
(d) Submitting a written request for the personal information in a form prescribed by the department. [1997 c.678 s.6]

802.185 Notice to individual of certain requests for information; waiver. The Department of Transportation may establish a procedure under which the department, upon receiving a request for disclosure of personal information that does not come from a person or government agency authorized under ORS 802.179 to receive the information or does not fall within one of the uses permitted under ORS 802.179, may mail a copy of the request to the individual about whom the information was requested. The copy of the request shall be accompanied by a statement that the personal information requested will not be disclosed unless the individual waives any right to privacy created by ORS 802.175 to 802.187. [1997 c.678 s.7]

802.187 Relationship to other privacy statutes; access to information about self. (1) Nothing in ORS 802.175 to 802.187 authorizes disclosure by the Department of Transportation of personal information that is barred from disclosure by the provisions of ORS 192.445 or 192.502 (2).
(2) Nothing in ORS 802.175 to 802.187 prohibits an individual from having access to personal information about the individual that is contained in motor vehicle records. [1997 c.678 s.8]
802.189 Criminal penalty for violation of ORS 802.175 to 802.187. Knowingly obtaining or using personal information from a motor vehicle record in violation of ORS 802.175 to 802.187 is a Class A misdemeanor. [1997 c.678 s.9]

802.191 Civil action for violation of ORS 802.175 to 802.187. (1) A person aggrieved by an intentional violation of ORS 802.175 to 802.187 may bring an action at law against a person who has knowingly obtained or used personal information about the aggrieved person in violation of ORS 802.175 to 802.187. The action shall be for actual damages or $2,500, whichever is greater, plus attorney fees and court costs reasonably incurred in the action.

(2) A person aggrieved by a violation of ORS 802.175 to 802.187, a district attorney or the Attorney General may obtain appropriate relief to enforce ORS 802.175 to 802.187, together with attorney fees and costs reasonably incurred in an action for relief.

(3) Any person whose use or obtaining of personal information in violation of ORS 802.175 to 802.187 subjects the State of Oregon to any liability or claim shall indemnify and hold harmless this state from all such liability and any claims, including attorney fees and court costs, incurred in any proceeding arising under ORS 802.175 to 802.187. [1997 c.678 s.10]