When a utilization review agent determines a document in the custody of the agent that contains confidential patient information or confidential physician or other health care provider financial data is no longer needed, the document shall be destroyed by a method that ensures the complete destruction of the information.