(1) A cause of action in the nature of defamation, invasion of privacy or negligence may not arise against:
(a) Any insurer or assigned claims agent for disclosing worker medical and vocational claim records in accordance with ORS 656.360; or
(b) Any person for furnishing worker medical and vocational claim records to an insurer or assigned claims agent in accordance with ORS 656.360.
(2) Subsection (1) of this section does not apply to the disclosure or furnishing of false information with malice or willful intent to injure any person.