Any information concerning an employee's medical diagnosis, treatment or referral for treatment maintained by any person or entity providing cafeteria plan services hereunder is confidential and shall not be disclosed except as provided under § 8-25-109.
T.C.A. § 8-25-402