The commissioner of health and human services, with the advice and consent of a majority of members of the commission, shall adopt rules pursuant to RSA 541-A, to assure de-identification of all individuals and facilities involved in the cases reviewed.