Information collected in these reports that could identify the hospital, any health care professional, any hospital staff, or the patient shall remain confidential and only be divulged as needed in the investigation or prosecution of a criminal offense. No information shall be included in the report naming or identifying any health care professional or hospital staff. The hospital medical records shall only be disclosed in accordance with Illinois law and the federal Health Insurance Portability and Accountability Act of 1996 and its rules.