Stat., which places restrictions on how an organization, including insurers and its agents acting upon its behalf, that possesses information relating to a person's physical or mental health, medical history or medical treatment, is to dispose of this information.