(1) Provider and facility contracts may not contain provisions that grant the carrier access to health information and other similar records unrelated to covered persons. This provision shall not limit the carrier's right to ask for and receive information relating to the ability of the provider or facility to deliver health care services that meet the accepted standards of medical care prevalent in the community.

(2) Provider and facility contract provisions granting the carrier access to medical records for audit purposes must be limited to only that necessary to perform the audit.

(3) Provider and facility contracts may not contain billing audit standards that are not mutual. For example, if the carrier grants itself the right to audit hospital billing records, then the hospital has the right to audit carrier denials of the hospital's claims.