(a) A utilization review agent shall preserve the confidentiality of individual medical records to the extent required by law.
(b) This chapter does not authorize a utilization review agent to take any action that violates a state or federal law or regulation concerning confidentiality of patient records.