(1)(a) The Oregon Health Authority, in consultation with the advisory work group convened under ORS 441.232, shall establish a program for the purpose of providing to a credentialing organization access to information that is necessary to credential or recredential a health care practitioner.

(b) To fulfill the requirements of this subsection, the authority shall establish and operate an electronic system through which credentialing information may be submitted to an electronic database and accessed. The system must operate and be accessible by credentialing organizations, health care practitioners and health care regulatory boards 24 hours a day, seven days a week. The authority may contract with a private entity to ensure the effective establishment and operation of the system.

(c) To the greatest extent practicable, the electronic system shall use the most accessible and current technology available.

(2) In consultation with the advisory work group convened under ORS 441.232, the authority shall adopt rules for the operation of the electronic system, including:

(a) Identification of the type of information that is necessary to credential or recredential each type of health care practitioner;

(b) Processes by which a health care practitioner or health care regulatory board submits credentialing information to the authority or an entity that has entered into a contract with the authority under subsection (1)(b) of this section;

(c) Processes, as required by recognized state and national credentialing standards, by which credentialing information submitted under ORS 441.228 is verified;

(d) Processes by which a credentialing organization, health care practitioner or health care regulatory board may electronically access the database;

(e) Processes by which a health care practitioner may attest that the credentialing information in the electronic database is current;

(f) The purposes for which credentialing information accessed by a credentialing organization or health care regulatory board may be used; and

(g) The imposition of fees, not to exceed the cost of administering ORS 441.224 to 441.233, on health care practitioners who submit credentialing information to the database and credentialing organizations that access the database.

(3) All information, except for general information used for directories, as defined by the authority by rule, that is received, kept and maintained in the database under this section is exempt from public disclosure under ORS 192.311 to 192.478. [2013 c.603 §3]