(1) The insurer shall have adequate staff and procedures to assure that health care provided to enrollees is medically necessary and appropriate.

(2) The insurer shall comply with and cooperate in any external quality review that may be implemented by the department or its designee. An external quality review may include participation in the design of the review, collection of data and making data available to the department or its designee.