A State insurance commissioner is requesting specific, individually identifiable information from an insurer as a...

The protected health information must be removed from the information. A substitute "key" may be supplied to allow re-identification, if needed.

Limit the information to coverage, dates of treatment, and payment amounts to avoid collecting any protected data.

Nothing. An oversight agency has the right to access this information without prior authorization.

Request that the insurance commissioner ask for an exception from HIPAA from the Department of Health and Human Services.

A written authorization is required from the patient.