(a) A state or federal regulatory agency;

(b) A law enforcement agency;

(c) A manager employed by the public or nonprofit employer of the employee; or

(d) An attorney licensed to practice law in this state if a confidential communication is made in connection with the alleged violation described in this section and in furtherance of the rendition of professional legal services to the employee that are subject to ORS 40.225.

(2) An employee may not assert the affirmative defense described under subsection (1) of this section if the information described in subsection (1) of this section:

(a) Is disclosed or redisclosed by the employee or at the employee’s direction to a party other than the parties listed in subsection (1) of this section;

(b) Is stated in a commercial exclusive negotiating agreement with a public or nonprofit employer, provided that the agreement is not related to the employee’s employment with the employer; or

(c) Is stated in a commercial nondisclosure agreement with a public or nonprofit employer, provided that the agreement is not related to the employee’s employment with the employer.

(3) The affirmative defense described in subsection (1) of this section is available to an employee who discloses information related to an alleged violation by a coworker or supervisor described in subsection (1) of this section if the disclosure relates to the course and scope of employment of the coworker or supervisor.

(4) The affirmative defense described in subsection (1) of this section may not be asserted by an employee who is an attorney or by an employee who is not an attorney but who is employed, retained, supervised or directed by an attorney if the information disclosed pursuant to subsection (1) of this section is related to the representation of a client.

(5) This section and ORS 659A.203, including disclosures under subsection (1) of this section, are subject to the rules of professional conduct established pursuant to ORS 9.490.

(6) Public and nonprofit employers shall establish and implement a policy regarding employees who invoke their rights under this section or ORS 659A.203. The policy shall delineate all rights and remedies provided to employees under this section and ORS 659A.203. The employer shall deliver a written or electronic copy of the policy to each employee.

(7) Subject to the rules of professional conduct established pursuant to ORS 9.490, a public employee who is an attorney may report to the Attorney General the employee’s knowledge of a violation of federal, state or local law, rule or regulation by the public employer.

(8) Disclosure of information pursuant to subsection (1) of this section does not waive attorney-client privilege or affect the applicability of any exemption from disclosure of a public record under ORS 192.338, 192.345 and 192.355.

(9) Notwithstanding subsection (1) of this section, information protected from disclosure under federal law, including but not limited to the federal Health Insurance Portability and Accountability Act of 1996 (P.L. 104-191), may be disclosed only in accordance with federal law. [2016 c.73 §2]