(a) No health care plan may share an enrollee's medical and treatment records or any other confidential information, including HIV related and mental health related information, with a certified external appeal agent or a clinical peer reviewer designated by such certified external appeal agent unless the enrollee, or a person authorized pursuant to law to consent to health care for the enrollee, has signed a specific release of information for HIV, mental health and drug and alcohol abuse or otherwise appropriate release in a manner and in such form as prescribed by the commissioner and superintendent in accordance with section 2782 of the Public Health Law for confidential HIV related information and sections 33.13 and 33.16 of the Mental Hygiene Law for mental health related information and as required by any applicable Federal law or regulation.

(b) No certified external appeal agent or clinical peer reviewer designated by such certified external appeal agent shall, except as specifically authorized by an appropriate release signed by the enrollee or by a person authorized pursuant to law to consent to health care for the enrollee, divulge confidential medical and treatment information or other information obtained through the review of an external appeal to any individual or group except the certified external appeal agent to whom the appeal was assigned and, as necessary, the commissioner and superintendent.