(a) Any data or information pertaining to the diagnosis, treatment or health of any enrollee or applicant obtained from that person or from any provider by any prepaid limited health service organization shall be held in confidence and may not be disclosed to any person except:

1. (1) To the extent that it may be necessary to facilitate an assessment of the quality of care delivered pursuant to section eighteen of this article or to review the grievance procedure pursuant to section fourteen of this article;
2. (2) Upon the express written consent of the enrollee or his or her legally authorized representative;
3. (3) Pursuant to statute or court order for the production of evidence or the discovery thereof;
4. (4) In the event of claim or litigation between that person and the prepaid limited health service organization where the data or information is pertinent;
5. (5) To a department or division of the state pursuant to the terms of a group contract for the provision of health care services between the prepaid limited health service organization and the department or division of the state; or
6. (6) For a Medicaid recipient enrolled under a group contract between a prepaid limited health service organization and the governmental agency responsible for administering the Medicaid program, in accordance with confidentiality rules applicable to the Medicaid program.

(c) Any information provided to the division of insurance that is part of the division investigation or examination is confidential and exempt from disclosure under subsection (a) of this section or otherwise until the investigation is completed or ceases to be active. For purposes of this subsection, an investigation is considered "active" while the investigation is being conducted by the division with a reasonable, good faith belief that it may lead to the filing of administrative, civil, or criminal proceedings. An investigation does not cease to be active if the division is proceeding with reasonable dispatch and there is a good faith belief that action may be initiated by the division or other administrative or law-enforcement agency. After an investigation or examination is completed or ceases to be active, portions of the records relating to the investigation or examination remain confidential and are exempt from disclosure under subsection (a) of this section or otherwise if the disclosure would:

1. (1) Jeopardize the integrity of another active investigation;
2. (2) Impair the safety and financial soundness of the licensee or affiliated party;
3. (3) Reveal personal financial information;
4. (4) Reveal the identity of a confidential source;
5. (5) Defame or cause unwarranted damage to the good name or reputation of an individual or jeopardize the safety of an individual; or
6. (6) Reveal investigative techniques or procedures.