Or. Admin. R. 419-400-0130 – Licensing Umbrella Rules: Privacy

(1) A child-caring agency must have and adhere to a written policy that addresses protection of the privacy of children and families the child-caring agency serves or has served.
(2) Except as provided in section (4) of this rule, a child-caring agency may not disclose any identifying information of a child in care, including a picture, audio, or video recording, without first obtaining the written consent from the child's parents or legal guardians.
(3) A child-caring agency must ensure the privacy of all information that identifies a child in care or family the child-caring agency serves. A child-caring agency may not disclose such information without proper written consent or as otherwise allowed by law.
(4) A person making a report of abuse as required in ORS 418.258 and 419B.010 may include references to otherwise confidential information for the sole purpose of making the report.

ORS 409.050, ORS 418.240 & ORS 418.005

ORS 418.205 - 418.327 & 418.526