Prohibits the insurance commissioner from disclosing nonpublic personal health information except in the furtherance of regulatory or legal action brought as a part of the insurance commissioner's official duties.