(A) In the event of a cancellation or nonrenewal, including those that involve policies referred to in Section 38-77-120, the insurer or agent responsible for the cancellation or nonrenewal shall give a written notice in a form approved by the director that:

1. (1) either provides the applicant, policyholder, or individual proposed for coverage with the specific reason or reasons for the cancellation or nonrenewal in writing or advises the person that upon written request he may receive the specific reason or reasons in writing; and
2. (2) provides the applicant, policyholder, or individual proposed for coverage with a summary of the rights established under subsection (B) of this section and Section 38-77-380.

(B) Upon receipt of a written request within ninety business days from the date of the mailing of notice or other communication of a cancellation or nonrenewal to an applicant, policyholder, or individual proposed for coverage, the insurer or agent shall furnish to the person within twenty-one business days from the date of receipt of the written request:

1. (1) the specific reason or reasons for the cancellation or nonrenewal in writing, if that information was not furnished initially in writing pursuant to subsection (A)(1);

2. (2) the specific items of personal and privileged information that support those reasons; however:

   1. (a) the insurer or agent shall not be required to furnish specific items of privileged information if it has a reasonable suspicion, based upon specific information available for review by the director, that the applicant, policyholder, or individual proposed for coverage has engaged in criminal activity, fraud, material misrepresentation, or material nondisclosure; and
   2. (b) specific items of medical-record information supplied by a medical-care institution or medical professional must be disclosed either directly to the individual about whom the information relates or to a medical professional designated by the individual and licensed to provide medical care with respect to the condition to which the information relates, whichever the insurer or agent prefers; and
3. (3) the names and addresses of the institutional sources that supplied the specific items of information given pursuant to subsection (B)(2) of this section. However, the identity of any medical professional or medical-care institution must be disclosed either directly to the individual or to the designated medical professional, whichever the insurer or agent prefers.