(a) The commissioner, in consultation with the center, shall adopt rules:
(1) specifying the types of data a payor is required to provide to the center under § 38.404 to determine health benefits costs and other reporting metrics, including, if necessary, types of data not expressly identified in that section;
(2) specifying the schedule, frequency, and manner in which a payor must provide data to the center under § 38.404, which must:
(A) require the payor to provide data to the center not less frequently than quarterly; and
(B) include provisions relating to data layout, data governance, historical data, data submission, use and sharing, information security, and privacy protection in data submissions; and
(3) establishing oversight and enforcement mechanisms to ensure that payors submit data to the database in accordance with this subchapter.
(b) In adopting rules governing methods for data submission, the commissioner shall to the maximum extent practicable use methods that are reasonable and cost-effective for payors.