(a) The commissioner shall enter into a written agreement with the National Association of Insurance Commissioners or a third-party consultant that governs the sharing and use of information provided under this chapter. The agreement must comply with and contain all the requirements listed in this section.
(b) The agreement must specify procedures and protocols regarding the confidentiality and security of information shared with the National Association of Insurance Commissioners or third-party consultant under this chapter, including procedures and protocols for sharing by the National Association of Insurance Commissioners with other state regulators from states in which the insurance group has domiciled insurers.

(c) The agreement must provide that the recipient:
(1) agrees in writing to maintain the confidential and privileged status of the own risk and solvency assessment-related documents, materials, or other information; and
(2) has verified in writing the legal authority to maintain the confidential and privileged status of the information.
(d) The agreement must specify that ownership of information shared with the National Association of Insurance Commissioners or third-party consultant under this chapter remains with the commissioner and that the National Association of Insurance Commissioners’ or third-party consultant’s use of the information is subject to the direction of the commissioner.
(e) The agreement must prohibit the National Association of Insurance Commissioners or third-party consultant from storing the information shared under this chapter in a permanent database after the underlying analysis is completed.
(f) The agreement must require prompt notice to be given to an insurer whose confidential information in the possession of the National Association of Insurance Commissioners or third-party consultant under this chapter is subject to a request or subpoena to the National Association of Insurance Commissioners or third-party consultant for disclosure or production.
(g) The agreement must require the National Association of Insurance Commissioners or third-party consultant to consent to intervention by an insurer in any judicial or administrative action in which the National Association of Insurance Commissioners or third-party consultant may be required to disclose confidential information about the insurer shared with the National Association of Insurance Commissioners or third-party consultant under this chapter.
(h) The agreement must provide for the insurer’s written consent in the case of an agreement involving a third-party consultant.