Relating to the unlawful disclosure of information about crime victims.
Summary
SB 763 creates a new criminal offense for certain health care providers who, while treating a patient, learn that the patient was a victim of sexual assault or sex trafficking and then knowingly disclose that information to a third party without the patient’s consent or authorization. The bill covers disclosures made in writing, in person, electronically, or by posting the information online. It expressly excludes disclosures that are otherwise permitted under Oregon’s medical privacy laws or the federal HIPAA framework.
The measure classifies a first offense as a Class A misdemeanor. If the provider has prior convictions under this section, a later offense becomes a Class C felony. The bill is aimed at protecting the privacy of vulnerable crime victims and limiting unauthorized sharing of sensitive victim information by medical professionals.
Impact
SB 763 would add a new criminal statute to Oregon law targeting unlawful disclosure of victim-status information by health care providers. It would operate alongside existing state medical privacy laws and HIPAA, but create separate criminal penalties when a provider knowingly reveals that a patient was a victim of sexual assault or sex trafficking without consent. The bill would affect health care providers, patients who are victims of these crimes, and prosecutors enforcing the new misdemeanor and felony penalties.
Sentiment
Based on the bill text and the absence of recorded committee testimony or votes in the provided materials, the overall sentiment appears protective and victim-centered. The measure is framed as a privacy safeguard for survivors of sexual assault and sex trafficking, with no documented opposition or amendment debate in the available record. There is no voting history provided to indicate broader legislative support or resistance.
Contention
The main potential point of contention is the scope of criminal liability for health care providers, especially where disclosures may be inadvertent, disputed, or overlap with other privacy obligations. Another issue is how the new offense interacts with existing HIPAA and Oregon confidentiality rules, since the bill carves out disclosures already permitted by those laws. The bill text suggests the policy goal is protecting victims’ privacy, while any concern would likely focus on enforcement, provider compliance, and whether criminal penalties are the appropriate remedy.