Requiring patient consent for the release of patient identifying or health plan company roster data to the commissioner of health or the health data institute; defining patient identifying data and roster data(ra)