N.Y. Comp. Codes R. & Regs. tit. 10, § 732-2.5
(a) PPOs shall have written contracts with all providers in the network.
(b) A PPO may enter into a management contract with an entity to oversee the management of the day to day activities of the PPO with respect to the performance of various services including: management information systems, utilization review, payment and medical dispute resolution and quality assurance. However, a PPO may not enter into a management contract with a self-insured employer, an insurance carrier or with any entity owned or controlled by, or affiliated with such carrier to oversee the management of the day to day activities of the PPO with respect to the performance of the following services: quality assurance and medical dispute resolution. Any such contract shall be effective only with the prior written consent of the commissioner, and shall include the following: