Arkansas Code Title 23. Public Utilities and Regulated Industries § 23-76-129. Medical records

(a) Any data or information pertaining to the diagnosis, treatment, or health of any enrollee or applicant obtained from the person or from any provider by any health maintenance organization shall be held in confidence and shall not be disclosed to any person except to the extent that it may be necessary to carry out the purposes of this chapter, upon the express consent of the enrollee or applicant, pursuant to statute or court order for the production of evidence or the discovery thereof or in the event of claim of litigation between the person and the health maintenance organization wherein the data or information is pertinent.

(b) A health maintenance organization shall be entitled to claim any statutory privileges against the disclosure which the provider who furnished the information to the health maintenance organization is entitled to claim.