according to ORS 475.338
Confidentiality
(1) The Department shall create and maintain both paper and computer data files of patients, designated caregivers, growers, and grow site addresses. The data files will include all information collected on the application forms or equivalent...