(a) Any data or information pertaining to the diagnosis, treatment, or health of any enrollee or applicant obtained from the person or from any provider by any health maintenance organization shall be held in confidence and shall not be disclosed to any person except:
(1) To the extent that it may be necessary to carry out the purposes of this chapter;
(2) Upon the express consent of the enrollee or applicant;
(3) Pursuant to statute or court order for the production of evidence;
(4) The discovery of evidence; or
(5) In the event of claim or litigation between the person and the health maintenance organization wherein such data or information is pertinent.
(b) A health maintenance organization shall be entitled to claim any statutory privileges against such disclosure which the provider who furnished the information to the health maintenance organization is entitled to claim.