(a) On or before March 1 of each year, each viatical settlement provider shall file with the commissioner an annual statement containing such information as the commissioner may prescribe. The information shall be limited to only those transactions where the viator is a resident of this state. Individual transaction data regarding the business of viatical settlements or data that could compromise the privacy of personal, financial and health information of the viator or insured shall be filed with the commissioner on a confidential basis.

(b) Except as otherwise allowed or required by law, a viatical settlement provider, viatical settlement broker, insurance company, insurance producer, information bureau, rating agency or company or any other person with actual knowledge of an insured's identity, shall not disclose that identity as an insured, or the insured's financial or medical information to any other person unless the disclosure:

(1) Is necessary to effect a viatical settlement between the viator and a viatical settlement provider and the viator and insured have provided prior written consent to the disclosure;

(2) Is provided in response to an investigation or examination by the commissioner or any other governmental officer or agency or pursuant to the requirements of subsection (c), section fourteen of this article;

(3) Is a term of or condition to the transfer of a policy by one viatical settlement provider to another viatical settlement provider;

(4) Is necessary to permit a financing entity, related provider trust or special purpose entity to finance the purchase of policies by a viatical settlement provider and the viator and insured have provided prior written consent to the disclosure;

(5) Is necessary to allow the viatical settlement provider or viatical settlement broker or their authorized representative to make contacts for the purpose of determining health status; or

(6) Is required to purchase stop loss coverage or financial guaranty insurance.