(2) A public entity that receives information pursuant to subsection (1) of this section must agree to take all reasonable steps to maintain the confidentiality of the information, except that the public entity may use or disclose the information to the extent necessary to carry out the regulatory or enforcement functions of the public entity.
(3) For purposes of this section, "public entity" has the meaning given that term in ORS 676.177. [2017 c.101 §3]