33-31-113. Confidentiality of medical information. (1) Any data or information pertaining to the diagnosis, treatment, or health of an enrollee or applicant obtained from the enrollee, applicant, or a provider by a health maintenance organization must be held in confidence and may not be disclosed to any person except:

(a) to the extent that it may be necessary to carry out the purposes of this chapter;

(b) upon the express consent of the enrollee or applicant;

(c) pursuant to statute or court order for the production of evidence or the discovery thereof; or

(d) in the event of claim or litigation between the enrollee or applicant and the health maintenance organization wherein the data or information is pertinent.

(2) A health maintenance organization is entitled to claim the same statutory privileges against disclosure that the provider who furnished the information to the health maintenance organization is entitled to claim.