HRS §432D-21
Keeping your health information private
Health maintenance organizations must keep your medical information confidential. They can only share it when needed for the plan's work, with your okay, when the law or a court requires it, or if you and the plan are in a legal dispute. The plan can also use the same legal privacy protections that your doctor has.
The statute, as written — Confidentiality of medical information
Any data or information pertaining to the diagnosis, treatment, or health of any enrollee or applicant obtained from such person or from any provider by any health maintenance organization shall be held in confidence and shall not be disclosed to any person except to the extent that it may be necessary to carry out the purposes of this chapter, upon the express consent of the enrollee or applicant, pursuant to statute or court order for the production of evidence or the discovery thereof, or in the event of a claim or litigation between such person and the health maintenance organization wherein such data or information is pertinent. A health maintenance organization shall be entitled to claim any statutory privileges against disclosure which the provider who furnished the information to the health maintenance organization is entitled to claim.
LawTrove is not legal advice. The summary above is a computer-generated restatement — the authoritative text is the official version linked above.