A private review agent may not disclose or publish individual medical records or any other confidential medical information obtained in the performance of utilization review activities without the patient's authorization or an order of a county, circuit or chancery court of Mississippi or a U.S. district court. Provided, however, that nothing in this chapter shall prohibit private review agents from providing information to a third party with whom the private review agent is under contract or acting on behalf of.