Sec. 7. (a) The ombudsman shall do the following:
(1) Establish procedures to receive and investigate complaints.
(2) Establish access controls for all information maintained by the bureau.
(3) Except as is necessary to investigate and resolve a complaint, ensure that the identity of a complainant will not be disclosed without:
(A) the complainant's written consent; or
(B) a court order.
(b) The correspondence and communication between the ombudsman and any person is a privileged communication.