A utilization review agent shall maintain all data concerning a patient or physician or other health care provider in a confidential manner that prevents unauthorized disclosure to a third party.