Disclosure limitations and conditions - Me. Rev. Stat. tit. 24-A, § 2215

A health insurance entity may not disclose personal information unless it is made in conjunction with the affected consumer and is limited to the minimum amount of information necessary and is disclosed:

1. With a written authorization from the consumer;
2. To an entity other than an insurance company and is necessary to perform a business function;
3. To a regulated insurance entity;
4. To a health care provider;
5. To an insurance regulatory authority;
6. To law enforcement or governmental authority;
7. In response to a court order;
8. For research purposes;
9. For marketing purposes;
10. To a peer review committee;
11. To a covered entity