(a) If any individual, after proper identification, submits a written request to an insurance institution, agent or insurance-support organization for access to recorded personal information about the individual which is reasonably described by the individual and reasonably locatable and retrievable by the insurance institution, agent or insurance-support organization, the insurance institution, agent or insurance-support organization shall within 30 business days from the date such request is received:

1. (1) Inform the individual of the nature and substance of such recorded personal information in writing, by telephone or by other oral communication, whichever the insurance institution, agent or insurance-support organization prefers;
2. (2) Permit the individual to see and copy, in person, such recorded personal information pertaining to him or her or to obtain a copy of such recorded personal information by mail, whichever the individual prefers, unless such recorded personal information is in coded form, in which case an accurate translation in plain language shall be provided in writing;
3. (3) Disclose to the individual the identity, if recorded, of those persons to whom the insurance institution, agent or insurance-support organization has disclosed such personal information within two years prior to such request, and if the identity is not recorded, the names of those insurance institutions, agents, insurance-support organizations or other persons to whom such information is normally disclosed; and
4. (4) Provide the individual with a summary of the procedures by which he or she may request correction, amendment or deletion of recorded personal information.