(a) General rule.— Except as provided for in this section, all working papers, recorded information, documents and copies of working papers, recorded information and documents produced by, obtained by or disclosed to the department or any other person in the course of exercising the department's powers and duties under this chapter:

1. (1) shall be confidential;
2. (2) shall not be subject to subpoena;
3. (3) shall not be subject to the act of February 14, 2008 (P.L.6, No.3), known as the Right-to-Know Law;
4. (4) shall not be subject to discovery or admissible in evidence in any private civil action; and
5. (5) may not be made public by the department or any other person.

(c) Information disclosure.— Subject to the confidentiality provisions of this section:

1. (1) Information shall be shared as follows:

   1. (i) Between the department and the Centers for Medicare and Medicaid Services for purposes of compliance with the Federal acts.
   2. (ii) Between the department and each insurer participating in the reinsurance program.
   3. (iii) Between the department and the exchange authority.

2. (2) Information may be disclosed as follows:

   1. (i) As necessary to comply with the audit requirements of section 9508 (relating to annual audit) and the reporting requirements of section 9509 (relating to annual report of operations), only in an aggregated and de-identified form.
   2. (ii) In any circumstance other than as described in paragraph (1) or subparagraph (i), only if the prior written consent of the company or person to which the information pertains is obtained.