(1) Except as otherwise allowed or required by law, a provider, broker, purchaser, insurance company, insurance producer, information bureau, rating agency or company, or any other person with actual knowledge of an insured's identity, shall not disclose the identity of an insured or information that there is a reasonable basis to believe could be used to identify the insured or the insured's financial or medical information to any other person unless the disclosure:

(a) Is necessary to effect a life settlement contract between the owner and a provider and the owner and insured have provided prior written consent to the disclosure;

(b) Is necessary to effectuate the sale of life settlement contracts, or interests therein, as investments, provided (i) the sale is conducted in accordance with applicable state and federal securities law, and (ii) the owner and the insured have both provided prior written consent to the disclosure;

(c) Is provided in response to an investigation or examination by the commissioner or any other governmental officer or agency or pursuant to the requirements of RCW 48.102.061, 48.102.140, and 48.102.150;

(d) Is a term or condition to the transfer of a policy by one provider to another provider, in which case the receiving provider shall be required to comply with the confidentiality requirements of this subsection;

(e) Is necessary to allow the provider or broker or their authorized representatives to make contacts for the purpose of determining health status.

(i) For the purposes of this section, the "authorized representative" does not include any person who has or may have any financial interest in the settlement contract other than a provider, licensed broker, financing entity, related provider trust, or special purpose entity.

(ii) A provider or broker shall require its authorized representative to agree in writing to adhere to the privacy provisions of this chapter; or

(f) Is required to purchase stop loss coverage.

(2) Nonpublic personal information solicited or obtained in connection with a proposed or actual life settlement contract shall be subject to the provisions applicable to financial institutions under the federal Gramm-Leach-Bliley act, P.L. 106-102 (1999).

(3) Names and individual identification data for all owners and insureds shall be considered private and confidential information and shall not be disclosed by the commissioner unless required by law.