Privacy and Confidentiality; disclosure of identifiable health data prohibited. (1) All information, reports, statements, memoranda or other data received by the commission are strictly confidential and shall be protected through the ongoing development and maintenance of policies and procedures to secure all its data files from misuse, to provide confidentiality, to ensure data security, and allo