Access to recorded personal information - Me. Rev. Stat. tit. 24-A, § 2210

If any consumer, after proper identification, submits a written request to an insurer for access to recorded personal information about the consumer that is reasonably described and reasonably locatable and retrievable, the insurer shall, within 30 days after the date the request is received:

• Inform the consumer of the nature and substance of the recorded personal information in writing or by telephone or other oral communication;
• Permit the consumer to see and copy, in person, the recorded personal information or to obtain a copy of the recorded personal information by mail, whichever method the consumer prefers, unless the recorded personal information is in coded form, in which case an accurate translation in plain language must be provided in writing;
• Provide to the consumer the identity, if recorded, of those persons to whom the regulated insurance entity or insurance support organization has disclosed the information described or similar personal information about the consumer during the previous 2 years and, if the identity is not recorded, the names of those carriers, producers, agencies, insurance support organizations or other persons to whom any such information is normally disclosed;
• Provide the consumer with a summary of the procedures by which the consumer may request correction, amendment or deletion of recorded personal information.

Instead of disclosure directly to the consumer, the carrier or producer may choose to disclose health care information, together with the identity of the health care provider who provided the information, to a person designated by the consumer who is licensed to provide health care with respect to the condition to which the information relates. The insurer must notify the consumer at the time of the disclosure that it has provided the information to the health care practitioner.