(1) Documents, communications, data, reports or other information expressly required to be collected, developed, maintained or reported to the Oregon Health Authority or other regulatory agency under ORS 415.012 to 415.430, rules adopted pursuant to ORS 415.011 or other state or federal law;
(2) Information obtained by observation or monitoring by the authority or any regulatory agency; or
(3) Information obtained from a source other than the compliance audit. [2019 c.478 §21]