Section 17. To the extent permissible under applicable state and federal privacy laws, every carrier shall disclose patient-level data to providers in their network solely for the purpose of carrying out treatment, coordinating care among providers and managing the care of their own patient panel; provided, that an individual provider shall only receive patient-level data related to patients treated by said provider. Patient-level data shall include, but not be limited to, health care service utilization, medical expenses, and demographics.

The division of insurance shall develop procedures and a standard format for disclosing such patient-level information. The division may require carriers to disclose such information through the all-payer claims database established under section 12 of chapter 12C if the division and the center for health information and analysis determine that the all-payer claims database is an efficient means to provide such information.

Carriers shall make available to any provider with whom they have entered into an alternative payment contract, the contracted prices of individual health care services within such payer’s network for the purpose of referrals.