Health benefit plans must set rates in compliance with this provision, and a carrier shall use a rating methodology that is based on the experience of all risks covered by that health benefit plan without regard to any factor not specifically authorized by this provision.