An insurer shall protect the confidentiality of an insured receiving mental health or substance use disorder services.