(1) Subject to discovery or admissible as evidence, in a private civil action.

(2) Subject to subpoena.

(3) Subject to the act of February 14, 2008 (P.L. 6, No. 3),¹ known as the Right-to-Know Law.

(4) Made public by the department or any other person without the prior written consent of the insurer to which it pertains, except as provided in subsection (c).

(1) May use ORSA-related information in furtherance of any regulatory or legal action brought as part of the department's official duties.

(2) May share ORSA-related information with the NAIC, regulatory or law enforcement officials of this Commonwealth or other jurisdictions, group supervisors, members of any supervisory college under section 1406.1² and with third-party consultants under section 2607,³ provided that, prior to receiving the ORSA-related information, the recipient demonstrates by written statement the necessary authority and intent to provide the same confidential treatment as required by this article.

(3) May receive and maintain as confidential ORSA-related information from the NAIC, regulatory or law enforcement officials of this Commonwealth or other jurisdictions, group supervisors and members of any supervisory college under section 1406.1 in which the ORSA-related information is confidential by law in those jurisdictions. ORSA-related information obtained under this paragraph shall be given confidential treatment, may not be subject to subpoena and may not be made public by the department, commissioner or any other person.

(1) Specific procedures and protocols for maintaining the confidentiality and security of ORSA-related information.

(2) Procedures and protocols for sharing ORSA-related information with regulators from other states in which the insurance group has domiciled insurers, including a written acknowledgment of the recipient's intent and legal authority to maintain the confidential and privileged status of the ORSA-related information.

(3) A provision specifying that ownership of the ORSA-related information shared remains with the department and that the use of the ORSA-related information is subject to the direction and approval of the department.

(4) A provision that prohibits storing, in a permanent database after the underlying analysis is completed, ORSA-related information shared pursuant to this article.

(5) A provision requiring the NAIC or third-party consultant, where permitted by law, to give prompt notice to the department and to the insurer regarding any subpoena, request for disclosure or request for production of the insurer's ORSA-related information in the possession of the NAIC or third-party consultant.

(6) A requirement that the NAIC or third-party consultant would consent to intervention by an insurer in any judicial or administrative action in which the NAIC or third-party consultant may be required to disclose ORSA-related information or other confidential information about the insurer or insurance group that was shared under this article.

(1) Be confidential and privileged.

(2) Not be subject to the Right-to-Know Law.

(3) Not be subject to subpoena.

(4) Not be subject to discovery or admissible as evidence, in any private civil action.