(a) Except as provided in subsection (b) of this section, the Secretary shall deny access to any business-related information concerning any person who applies for a certificate or is certified under this subtitle.
(b) If the Secretary determines that disclosure is necessary to protect the public health, the Secretary may disclose any business-related information concerning any person who applies for a certificate or is certified under this subtitle.