United States · compare states

Georgia and Oregon: health record laws compared

Georgia and Oregon, side by side on the seven questions, with the laws read October 3, 2026. They give different answers on health data outside HIPAA, getting a copy, health information exchange and AI in care, and the same answer on everything else we could compare. We can't compare genetic records (not checked in Georgia), right to sue (not checked in Georgia) and breach notice (not checked in Georgia).

Laws read · page updated

The seven questions, side by side

"Differs" marks a question where the answers are not the same; "same" marks one where they are. "Can't compare" means at least one answer was not checked; a not-checked answer is not a no. Where a question has a map, the small square shows the color each column has on it. Each citation opens that state's page, with the law quoted, dated and linked. There is no total and no rank: the questions are on different scales, and some have no best answer.

Georgia and Oregon, in the order picked. Laws read October 3, 2026. Not legal advice.
QuestionGeorgiaOregon
Health data outside HIPAADo apps and wearables need your OK before sharing health data?differs No law foundWe searched the official code and found none.How we searched Opt-inYes, at least for some businesses. A law in force requires your OK before they use or share your health data (opt-in).ORS 646A.578(2)(b); ORS 646A.570(18)(a)
Getting a copyDo you get a copy faster or free in some cases?differs Free copy in some casesIn one way: a free copy in at least one case.O.C.G.A. 31-33-3(a); O.C.G.A. 31-33-3 Faster, and free in some casesYes, both. A deadline shorter than 30 days, and a free copy in at least one case.ORS 192.576(1); ORS 179.505(9)(a)
Health information exchangeCan you say no to sharing through a health information exchange (a network that passes records between doctors)?differs Opt-outOpt-out. Your records go through the exchange unless you say no, and there is a published way to say no.Georgia Health Information Network, Inc., Policies and Procedures, Policy GaHIN-2002; Georgia Health Information Network, Inc., Policies and Procedures, Policy GaHIN-2005 No law foundWe searched the official code and found none.How we searched
Are some sensitive records, like mental health or HIV, given extra rules? These answers record whether a rule exists and what it says. They say nothing about whether any care is legal or available.
Reproductive health recordssame Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.O.C.G.A. 16-12-141(f), as amended by Ga. L. 2019, p. 711, HB 481 Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.Oregon Laws 2026, chapter 52, section 9(2)(c) (HB 4088), added to ORS 435.190 to 435.245
Mental health recordssame Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.O.C.G.A. 37-3-166(a), as revised by HB 89 (2025), Act 43 Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.ORS 179.505(17)(a)
HIV recordssame Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.O.C.G.A. 24-12-21(c), as amended by Ga. L. 2016, p. 735, HB 1058 Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.ORS 433.045(4)(a)
Genetic recordscan't compare Can't compare: not checked GA page Has a ruleYes. A law in force has a specific rule on keeping these records confidential or on who may see them.ORS 192.539(1)
Right to sueCan you sue if your records are misused?can't compare Can't compare: not checked GA page Yes, in generalYes. You can sue over unlawful collection, use or sharing of medical records or health data in general.ORS 179.507(2); ORS 192.541(1)
Breach noticeMust you be told if health data leaks in a breach?can't compare Can't compare: not checked GA page Medical and insurance dataYes. The breach notice law covers both medical information and health insurance information.ORS 646A.602(12)(a)(A)(vi) and (vii); ORS 646A.604(3)(a)
AI in careAre there rules for AI used in your care?differs 1 of 3 rulesOne of the three rules is in force. A licensed clinician decides, not AI alone.Other laws are signed and take effect January 1, 2027 and July 1, 2027.O.C.G.A. 33-46-7.1(c), enacted by SB 444 (2026); O.C.G.A. 39-5-6(h), enacted by SB 540 (2026) No rulesNo. A law is in force, but it has none of the three rules.ORS 678.027

Not legal advice. This records what each law said on the date we read it. Laws and court orders change. State laws add to the federal floor. The United States score in the world index rates only federal law and national systems, so these state profiles do not change it.

Compare other states

Compare states side by sidePick two or three. The columns stay in the order you pick them.

All 50 states and Washington, DC, question by question

Built by SuperTruth, which checks whether a record can be trusted before an AI acts on it. About SuperTruth · How we used AI

Health Record Rights Index by SuperTruth. Research tool, not legal advice. Text CC BY 4.0.