Colo. Rev. Stat. § 10-16-423
Any data or information pertaining to the diagnosis, treatment, or health of any enrollee or applicant obtained from such person or from any provider by any health maintenance organization shall be held in confidence and shall not be disclosed to any person except to the extent that it may be necessary to carry out the purposes of part 1 of this article or this part 4; or upon the express consent of the enrollee or applicant; or pursuant to statute or court order for the production of evidence or the discovery thereof; or in the event of claim or litigation between such person and the health maintenance organization wherein such data or information is pertinent; or as otherwise required or permitted by state or federal law. A health maintenance organization shall be entitled to claim any statutory privileges against such disclosure that the provider, who furnished such information to the health maintenance organization, is entitled to claim.
C.R.S. § 10-16-423
The provisions of this section were similar to provisions of several former sections as they existed prior to 1992.