(a) On or before August 1 each year, each cannabis licensee and cannabis registrant shall report to the Administration information determined by the Administration to be necessary to continue to assess the need for remedial measures in the cannabis industry and market, including:

(1) the number of minority and women owners of the cannabis licensee or cannabis registrant;

(2) the ownership interest of any minority and women owners of the cannabis licensee or cannabis registrant;

(3) the number of minority and women employees of the cannabis licensee or cannabis registrant;

(4) a list of the cannabis licensee’s or cannabis registrant’s expenditures for the prior State fiscal year; and

(5) for each expenditure:

(i) a description of the work performed;

(ii) the dollar value of the expenditure;

(iii) whether the work was performed by the cannabis licensee or cannabis registrant or a contractor or subcontractor; and

(iv) if the work was performed by a contractor or subcontractor, the name of the entity that performed the work.

(b) All data provided by a cannabis licensee or cannabis registrant under subsection (a)(4) and (5) of this section:

(1) shall constitute confidential commercial and financial information and be treated as confidential by the Administration and the State; and

(2) may be used only for the purposes authorized under this section and may only be disclosed to the public in an anonymized or aggregated format.

(c) On or before August 15 each year, the Administration shall provide the data collected under subsection (a) of this section to the certification agency designated by the Board of Public Works under § 14-303(b) of the State Finance and Procurement Article.

(d) On or before January 1 each year, the Administration shall report to the General Assembly, in accordance with § 2-1257 of the State Government Article, on the information reported under subsection (a)(1) through (3) of this section.