(a) Each insurer or other person utilizing the services of a third-party administrator shall be responsible for determining the benefits, premium rates, underwriting criteria and claims payment procedures for the lines, classes or types of insurance such third-party administrator is authorized to administer, and for securing reinsurance, if any. The insurer or other person utilizing the services of a third-party administrator shall provide to such third-party administrator, in writing, procedures pertaining to such third-party administrator’s administration of benefits, premium rates, underwriting criteria and claims payment. Each insurer or other person utilizing the services of a third-party administrator shall be responsible for the competent administration of such insurer’s or other person’s benefit and service programs.

(b) If a third-party administrator administers benefits for more than one hundred certificate holders on behalf of an insurer or other person utilizing the services of a third-party administrator, such insurer or other person shall, at least semiannually, conduct a review of the operations of the third-party administrator. At least one such review shall be an on-site audit of the operations of the third-party administrator.