(2) The authority shall adopt rules for the registry, including but not limited to rules that:
(a) Require submission of the following documents to the registry, unless the patient has requested to opt out of the registry:
(A) A copy of each POLST;
(B) A copy of a revised POLST; and
(C) Notice of any known revocation of a POLST;
(b) Prescribe the manner for submitting information described in paragraph (a) of this subsection;
(c) Require the release of registry information to authorized users for treatment purposes;
(d) Authorize notification by the registry to specified persons of the receipt, revision or revocation of a POLST; and
(e) Establish procedures to protect the accuracy and confidentiality of information submitted to the registry.
(3) The authority may permit qualified researchers to access registry data. If the authority permits qualified researchers to have access to registry data, the authority shall adopt rules governing the access to data that shall include but need not be limited to:
(a) The process for a qualified researcher to request access to registry data;
(b) The types of data that a qualified researcher may be provided from the registry; and
(c) The manner by which a researcher must protect registry data obtained under this subsection.
(4) The authority may contract with a private or public entity to establish or maintain the registry, and such contract is exempt from the requirements of ORS chapters 279A, 279B and 279C. [2009 c.595 §1184]