Prohibits the insurance commissioner from disclosing nonpublic personal health information except in the furtherance of regulatory or legal action brought as a part of the insurance commissioner's official duties.

Requires the insurance commissioner to add language to the release that consumers use when filing complaints with the office of the insurance commissioner informing them that: (1) The office may share their personal health information with other entities; and

(2) The information will only be shared if it is to be held confidential by the other entity.

Exempts the following from disclosure under the public records act: Nonpublic personal health information obtained by, disclosed to, or in the custody of the insurance commissioner.