Massachusetts General Laws Part I. Administration of the Government (Ch. 1-182) Ch. 32B, § 27

An insurance carrier, third party purchasing group or administrator or the commission in the case of a governmental unit, which has undertaken to provide health insurance coverage to its subscribers by acceptance of sections 19 or 23, shall, upon written request, provide the governmental unit or public employee committee with its historical claims data within 45 days of such request; provided, that all personally identifying information within such claims shall be redacted and released in a form and manner compliant with all applicable state and federal privacy statutes and regulations including, but not limited to, the federal Health Insurance Portability and Accountability Act of 1996.