N.J. Admin. Code § 11:24-10.2
Any data or information pertaining to the diagnosis, treatment, or health of any member or applicant obtained from the member or from any provider by any HMO shall be held in confidence. The data or information shall not be disclosed to any person, except to the extent that it may be necessary to carry out the purposes of this chapter, or upon the express consent of the member or applicant; or pursuant to state or court order for the production of evidence or the discovery thereof; or in the event of claim or litigation between such member and the HMO wherein such data or information is pertinent as otherwise provided by law. An HMO shall be entitled to claim any statutory privileges against such disclosure which the provider who furnished such information to the health organization is entitled to claim. An HMO may also release aggregate data related to the diagnosis, treatment, or health of all or groups of members or applicants where the identity of every member is kept confidential and cannot be determined by the manner in which the data is released and presented.
N.J. Admin. Code § 11:24-10.2