(a) An HCC must establish and administer procedures and internal controls to safeguard and ensure against the sharing of any confidential information with or among participants.(b) The requirements of this section include establishing and enforcing collection, custodial, retrieval, and transmittal procedures to ensure that information that the HCC or its participants must maintain as confidential is protected as confidential both as to entities and individuals outside the HCC, and between or among participants. The requirements of this section apply to confidential information that:(1) the HCC maintains as custodian; or(2) the HCC or any of its participants submit to the department under Insurance Code §848.057 or to the attorney general under Insurance Code §848.059.