Unless a court orders otherwise, the department shall treat the following records and information as confidential and prevent their disclosure to the public:
(1) the medical records of enrollees of an organization; and
(2) the annual audits performed under Section 31A-8-404.