Subject to the requirements and protections contained in Ohio law pertaining to release of confidential and/or privileged information, in the course of medical management in the QHP system, confidential information may be exchanged among the bureau, the QHPs, an employer and its representative, an employee and his or her representative, and the provider. All parties providing or requiring such confidential information for use in the QHP system shall not provide or use such confidential information for any purpose other than to perform duties required under the QHP system, and shall prevent such information from further disclosure or use by unauthorized persons.