An issuer may not make an adverse underwriting decision based on a positive HIV-related test unless a test protocol established by commissioner rule is followed.