N.J. Stat. § 26:2J-27
Any data or information pertaining to the diagnosis, treatment, or health of any enrollee or applicant obtained from such enrollee or from any provider by any health maintenance organization shall be held in confidence and shall not be disclosed to any person except to the extent that it may be necessary to carry out the purposes of this act; or upon the express consent of the enrollee or applicant; or pursuant to statute or court order for the production of evidence or the discovery thereof; or in the event of claim or litigation between such enrollee and the health maintenance organization wherein such data or information is pertinent. A health maintenance organization shall be entitled to claim any statutory privileges against such disclosure which the provider who furnished such information to the health organization is entitled to claim.
N.J.S. § 26:2J-27