A covered entity shall not unfairly discriminate against a consumer because that consumer has not authorized disclosure of his or her nonpublic personal health information pursuant to the provisions of this subchapter.