The Secretary and Insurance Commissioner, in consultation with the advisory committee, shall propose rules for legislative approval in accordance with the provisions of article three, chapter twenty-nine-a of this code on or before June 1, 2011. The legislative rules must include, but shall not be limited to, the following matters:

(1) Performance standards for the evaluation of the statewide credentialing verification organization;

(2) The manner in which the statewide credentialing verification organization must demonstrate compliance with credentialing standards and regulations;

(3) Penalties, including monetary sanctions, for violations of any provisions of this article;

(4) Duties of the statewide credentialing verification organization and the timelines for completion of its verification duties and services;

(5) Procedures for maintaining healthcare practitioner files;

(6) The payment system to cover the costs of the credentialing program;

(7) The use and confidentiality of data generated, collected and maintained by the statewide credentialing verification organization;

(8) Except with respect to health care facilities, the methodology for determination and communication of the common recredentialing date for a practitioner; and

(9) Procedures and criteria for the bidding and selection of the statewide credentialing verification organization.