Oregon Immunization Registry (ALERT IIS) Access Rules for Occupational Medicine and DOT Clinics Querying Adult Vaccines

ALERT IIS Overview

ALERT IIS is Oregon’s statewide immunization registry that consolidates vaccination histories for people of all ages to support patient care, coverage assessment, and public health. You can submit data through the web user interface, batch uploads, or real‑time data exchange from your EHR. ([oregon.gov](https://www.oregon.gov/oha/PH/PREVENTIONWELLNESS/VACCINESIMMUNIZATION/ALERT/Pages/index.aspx?utm_source=openai))

For live EHR connections, Oregon uses HL7 messaging. Organizations complete onboarding and testing with the ALERT IIS Data Exchange team; once approved, production submissions can be near real time. State‑supplied vaccine administrations must be submitted within established timelines. ([oregon.gov](https://www.oregon.gov/oha/PH/PREVENTIONWELLNESS/VACCINESIMMUNIZATION/ALERT/Pages/electronic_data.aspx?utm_source=openai))

Authorized Users for Occupational Medicine and DOT Clinics

Who qualifies as an “authorized user”

Under Oregon law, authorized users include licensed health care providers and health care institutions, among others. Occupational medicine practices and DOT examiner clinics qualify when enrolled and acting within a treatment relationship (for example, pre‑employment or DOT physical encounters). ([oregonlegislature.gov](https://www.oregonlegislature.gov/bills_laws/ors/ors433.html?utm_source=openai))

Provider Enrollment and user roles

Clinics new to ALERT IIS enroll at the organization level, designate a Super User, and plan staff roles. Typical roles are Query Only (view/print histories and forecasts), Standard User (adds documentation and manages inventory), and Super User (manages users and clinic profile). ([oregon.gov](https://www.oregon.gov/oha/PH/PREVENTIONWELLNESS/VACCINESIMMUNIZATION/ALERT/Pages/EnrollNewClinic.aspx))

Data Use Agreement requirements

Each site completes an Authorized Site Agreement and each individual signs an Individual User Agreement that governs confidentiality, permitted use (only for clients under your care), and security. These agreements function as your data use agreements with the state program. ([alertiis.org](https://www.alertiis.org/docs/clinic_medical_site_agreement.pdf?utm_source=openai))

Training Requirements for Access

Role‑based training and activation

Access is training‑dependent. Query Only, Standard, and Super User courses are completed in the OIP Training Portal; users must also read the confidentiality policy and submit the Individual User Agreement. After course completion, OIP confirms role upgrades—typically within 1–3 business days. ([oregon.gov](https://www.oregon.gov/oha/ph/preventionwellness/vaccinesimmunization/alert/pages/enrollnewuser.aspx))

Recommended courses for clinic operations

• Accountability Report and Vaccine Eligibility Report trainings to monitor data quality, inventory use, and stewardship compliance. ([oregon.gov](https://www.oregon.gov/oha/ph/preventionwellness/vaccinesimmunization/alert/pages/training.aspx?utm_source=openai))
• Data Exchange onboarding guidance for EHR interfaces if your clinic wants real‑time submissions. ([oregon.gov](https://www.oregon.gov/oha/PH/PREVENTIONWELLNESS/VACCINESIMMUNIZATION/ALERT/Pages/electronic_data.aspx?utm_source=openai))

Adult Vaccine Reporting Requirements

Who must report

Reporting mandates apply to certain providers: all organizations receiving state‑supplied vaccine (e.g., VFC/VAP clinics), all pharmacies, and all dentists must report doses to ALERT IIS. Other providers who choose to participate and administer vaccines must also report within required timelines. ([oregon.gov](https://www.oregon.gov/oha/PH/PREVENTIONWELLNESS/VACCINESIMMUNIZATION/ALERT/Pages/FAQs.aspx?utm_source=openai))

Timelines and submission methods

Providers that participate in ALERT IIS and administer vaccines must report each dose within 14 calendar days; COVID‑19 timelines may be specified separately in rule. Real‑time HL7 exchange is encouraged where available to meet timeliness and completeness standards. ([law.cornell.edu](https://www.law.cornell.edu/regulations/oregon/Or-Admin-Code-SS-333-049-0050?utm_source=openai))

Required data elements for adult doses

When documenting, include: client name, address, phone, gender, DOB; administration date; vaccine code (CPT/CVX/NDC); dose‑level vaccine eligibility code; administering site ID; lot number; manufacturer (when available); and any other elements specified by the program. ([oregon.public.law](https://oregon.public.law/rules/oar_333-049-0050?utm_source=openai))

Data Sharing and Consent Policies

Use without prior consent for clients under your care

Oregon law permits authorized users to provide information to, and obtain information from, the immunization registry without prior client consent when the client is under their care. This allows occupational and DOT clinicians to query adult records during clinical encounters. ([oregonlegislature.gov](https://www.oregonlegislature.gov/bills_laws/ors/ors433.html?utm_source=openai))

Consent Opt‑Out options for adults

Adults (18+) may request that their registry record be sealed (inaccessible to most authorized users) or purged (removed) by submitting the appropriate request to the Oregon Immunization Program. Clinics should inform patients of these options upon request. ([oregon.gov](https://www.oregon.gov/oha/ph/preventionwellness/vaccinesimmunization/gettingimmunized/pages/immrecords.aspx?utm_source=openai))

Cross‑jurisdictional exchange and confidentiality

ALERT IIS may share data with other registries if the receiving registry meets Oregon’s confidentiality and security standards. All disclosures remain subject to statutory confidentiality and your signed agreements. ([oregonlegislature.gov](https://www.oregonlegislature.gov/bills_laws/lawsstatutes/2007orLaw0196.html?utm_source=openai))

Vaccine Inventory Management

When state‑supplied vaccine is involved

If your clinic receives state‑supplied vaccine, you must manage ordering and inventory in ALERT IIS and meet vaccine accountability requirements under the Oregon Administrative Rules. This includes documenting lot numbers and dose‑level vaccine eligibility codes for each administered dose. ([oregon.gov](https://www.oregon.gov/oha/ph/preventionwellness/vaccinesimmunization/ruleslaws/pages/index.aspx?utm_source=openai))

Eligibility coding and reconciliation

Use correct vaccine eligibility codes (for example, codes that identify Oregon Health Plan/Medicaid) so administered doses deduct properly from inventory and appear on accountability reports. Run routine inventory and VFC accountability reports to reconcile stock and usage. ([alertiis.org](https://www.alertiis.org/AlertIISHelp/webhelp/reports/request_vfc_reports.htm?utm_source=openai))

Operational tips

• Link administered doses to inventory to ensure real‑time decrementing and accurate audit trails. ([oregon.gov](https://www.oregon.gov/oha/ph/preventionwellness/vaccinesimmunization/alert/pages/training.aspx?utm_source=openai))
• Consider EHR data exchange to reduce manual entry and improve timeliness. ([oregon.gov](https://www.oregon.gov/oha/PH/PREVENTIONWELLNESS/VACCINESIMMUNIZATION/ALERT/Pages/electronic_data.aspx?utm_source=openai))

Legal and Regulatory Framework

Key statutes (ORS)

• ORS 433.090–433.102: Definitions, purpose, operation of immunization registries; confidentiality; authorized users; and provider reporting authority. ([oregonlegislature.gov](https://www.oregonlegislature.gov/bills_laws/ors/ors433.html?utm_source=openai))

Key administrative rules (OAR)

• OAR 333‑049 (Immunization Information Systems): Collection and release of information; reporting to IIS; limitations on transfer; confidentiality; record deletion; security. ([regulations.justia.com](https://regulations.justia.com/states/oregon/chapter-333/division-49/?utm_source=openai))
• OAR 333‑047 (State‑supplied Vaccine Accountability): Definitions; accounting for vaccine; timelines for reporting and inventory management. ([oregon.gov](https://www.oregon.gov/oha/ph/preventionwellness/vaccinesimmunization/ruleslaws/pages/index.aspx?utm_source=openai))

FAQs

How can occupational medicine clinics enroll in ALERT IIS?

Confirm your clinic is not already enrolled, then complete organization enrollment, designate a Super User, and identify staff roles. After enrollment, each user finishes role‑specific training and submits an Individual User Agreement before access is activated. If you use an EHR, plan for data exchange during enrollment. ([oregon.gov](https://www.oregon.gov/oha/PH/PREVENTIONWELLNESS/VACCINESIMMUNIZATION/ALERT/Pages/EnrollNewClinic.aspx))

What are the reporting timelines for adult vaccines?

Participating providers who administer vaccines must report each dose to ALERT IIS within 14 calendar days; state‑supplied vaccine and certain programs (e.g., pharmacies, dentists) have mandatory reporting requirements. Real‑time submissions via EHR interfaces are encouraged to meet timeliness and completeness standards. ([law.cornell.edu](https://www.law.cornell.edu/regulations/oregon/Or-Admin-Code-SS-333-049-0050?utm_source=openai))

Is patient consent required for including adult immunization data?

No. For clients under your care, Oregon law permits authorized users to submit to and query ALERT IIS without prior consent. However, adults may request to seal or purge their record; respect such requests and follow your data use agreements and confidentiality obligations. ([oregonlegislature.gov](https://www.oregonlegislature.gov/bills_laws/ors/ors433.html?utm_source=openai))

What training is needed for ALERT IIS access?

Training is role‑specific: Query Only, Standard, or Super User courses are required, along with reading the confidentiality policy and submitting the Individual User Agreement. After completion, OIP typically upgrades access within 1–3 business days. ([oregon.gov](https://www.oregon.gov/oha/ph/preventionwellness/vaccinesimmunization/alert/pages/enrollnewuser.aspx))

In summary, occupational medicine and DOT clinics can lawfully query adult immunization histories in ALERT IIS once enrolled, trained, and bound by data use agreements. Ensure timely, standards‑based reporting for any vaccines you administer, manage state‑supplied vaccine inventory within ALERT IIS if applicable, and honor adult opt-out requests while maintaining confidentiality throughout your workflows. ([oregon.gov](https://www.oregon.gov/oha/PH/PREVENTIONWELLNESS/VACCINESIMMUNIZATION/ALERT/Pages/index.aspx?utm_source=openai))