Mass. Gen. Laws. Ann. ch. 175I, § 8 - Recorded personal information; medical record information; disclosure; fees

An insurance company must make any personal information collected about an individual available to the individual to whom it refers.  An individual who seeks his or her recorded personal information from the insurance company must submit a written request to the company.  The insurance organization must within 30 days allow the individual to inspect the record, give a copy of the information to the individual, disclose the identity of any person that the insurance organization has disclosed the information to within the last 2 years, and inform the individual of the procedures to amend, delete or correct the record.  

Medical record information that has been supplied to the insurance company by a health care provider that is requested by an individual, must be given either directly to the individual or the supplying health care provider.  Once medical information has been released to a medical professional designated by the individual, the insurance company must inform the individual of this release.