(a) Authorization.--The department may retain, at the insurer's expense, third-party consultants, including attorneys, actuaries, accountants and other experts not otherwise a part of the department's staff as may be reasonably necessary to assist the department in reviewing the risk management framework, ORSA, ORSA summary report or the insurer's compliance with this article.

(b) Control.--Any persons retained under subsection (a) shall be under the direction and control of the department and shall act in a purely advisory capacity.

(c) Confidentiality.--Third-party consultants shall be subject to the same confidentiality standards and requirements as the department.

(d) Verification.--As part of the retention process, a third-party consultant shall verify to the department, with notice to the insurer, that it is free of a conflict of interest and that it has internal procedures in place to monitor compliance with a conflict and to comply with the confidentiality standards and requirements of this act.

(e) Written consent.--A retention agreement with a third-party consultant shall expressly require the written consent of the insurer prior to making public information provided under this act, as required under section 2608(a).¹