(2) The authority may contract with a state agency or private entity to ensure the effective establishment, maintenance or operation of the electronic system.

(3) Except as provided in subsection (4) of this section, information kept in the electronic system is confidential and not subject to public disclosure under ORS 192.311 to 192.478. Except as provided in subsection (4) of this section, the authority may not disclose the information for any reason.

(4) Except as provided in subsection (5) of this section, the authority shall establish the electronic system in a manner that allows the Oregon Liquor Control Commission and the Department of Revenue to remotely access the electronic system. Information disclosed to the commission and the department under this subsection remains confidential and not subject to public disclosure under ORS 192.311 to 192.478. The commission and the department may not disclose the information for any reason.

(5) The authority is not required to keep in the database, and the commission and the department may not access, the following types of information:

(a) Information related to the debilitating condition of a registry identification cardholder; or

(b) The contact information or address of a registry identification cardholder or a designated primary caregiver, unless the contact information or address are the same as the contact information or address of a marijuana grow site.

(6) The electronic system must be immediately accessible by the commission and the department at all times. [2017 c.183 §31]