Requiring patient consent for the release of patient identifying or health plancompany roster data to the commissioner of health or the health data institute; defining patient identifying data and roster data(mk)