A carrier shall protect the confidentiality of an enrollee receiving mental health or substance use disorder treatment.