Information that could identify the cancer patient must be kept strictly confidential in accordance with the administrative policy of the Department of Health and Environmental Control. This information must not be open for inspection except by the individual patient or the patient’s authorized representative. Procedures for the disclosure of confidential information to researchers for the purposes of cancer prevention, control, and research must be promulgated in regulations. The data release protocol developed in coordination with the Revenue and Fiscal Affairs Office, must be utilized by the registry to determine appropriate use and release of cancer registry data.