(1) Any data or information pertaining to the diagnosis, treatment, or health of an enrollee or applicant obtained from the enrollee, applicant, or a provider by a health maintenance organization must be held in confidence and may not be disclosed to any person except:
(a) to the extent that it may be necessary to carry out the purposes of this chapter;
(b) upon the express consent of the enrollee or applicant;
(c) pursuant to statute or court order for the production of evidence or the discovery thereof; or
(d) in the event of claim or litigation between the enrollee or applicant and the health maintenance organization wherein the data or information is pertinent.
(2) A health maintenance organization is entitled to claim the same statutory privileges against disclosure that the provider who furnished the information to the health maintenance organization is entitled to claim.