The Department is authorized to require any health insurer to provide, upon the request of the Department, eligibility and coverage information (including, but not limited to the name, address, date of birth, Social Security number, policy number, group identification number, types of covered services under the policy, effective dates of coverage, and termination date for each client) that will enable the Department to determine during what period Medicaid recipients may be or may have been covered by the health insurer and the nature of the coverage that is or was provided. This information shall be referred to as the “Plan Eligibility Data Elements.” The Department may enter into agreements with the health insurers for the purpose of carrying out the provisions of this section. The agreement shall provide for the electronic exchange of data between the parties at a mutually agreed upon frequency and in a format specified by the Department designed to verify that an individual has coverage, but no less frequently than once every 2 months. The agreement shall specify the data elements that shall be included on the electronic file from the health insurer. No health insurer that provides data required by the Department, whether confidential or not, shall be held liable for the provision of such data to the Department or for any use made thereof. The Department shall have procedures in place to ensure compliance with the requirements of the Health Insurance Portability and Accountability Act of 1996 [P.L. 104-191] relating to the privacy and security of individually identifiable health information, as applicable.