The commissioner shall maintain the confidentiality of the following received in accordance with Section 31A-16-105 from an insurance holding company. 4 states have confidentiality protections specific to EOBs.These states allow insurers to mail an EOB directly to the patient instead of the policy holder. The Coulter Law Group specializes in Utah Corporate Confidentiality Agreements. Call 801-800-8859 today for a Free Consultation! A Data Use Agreement (DUA) is an agreement used when there is exchange of research data between the University of Utah and another entity. 42 CFR Part 2 applies to the electronic exchange of healthcare records with a Part 2 Program. Applying the Substance Use Confidentiality Regulations.