A carrier shall annually provide a written attestation to the commissioner that the utilization review program of the carrier or its designee complies with all applicable state and federal laws concerning confidentiality and reporting requirements.