(a)
(1) All steps necessary under state and federal law to protect confidentiality of applicants and covered persons shall be undertaken by the Board of Directors of the Arkansas Comprehensive Health Insurance Pool to prevent the identification of individual records of covered persons under the plan, rejected by the plan, or who may become ineligible for further participation in the plan.
(2) Procedures shall be written by the board to assure the confidentiality of records of persons covered under, rejected by, or who became ineligible for further participation in the plan when gathering and submitting data to the board or any other entity.
(b) Any information submitted to the board by hospitals or any other provider pursuant to this subchapter from which the identity of a particular individual can be determined shall be privileged and confidential and shall not be disclosed in any manner. The foregoing includes, but shall not be limited to, disclosure, inspection, or copying under the Freedom of Information Act of 1967, § 25-19-101 et seq.