Information reported pursuant to the Act is considered confidential and shall not be disclosed (other than to the physician or practitioner involved) except with respect to professional review activity, as necessary to carry out the provisions of the Act or in accordance with regulations of the Secretary promulgated pursuant to the Act. Nothing in this subsection shall prevent the disclosure of such information by a party which is otherwise authorized, under applicable State law, to make such disclosure. Information that is in a form that does not permit the identification of any particular medical care entity, physician, other medical care practitioner, or patient shall not be considered confidential.

Any person who improperly discloses this information shall be subject to a civil money penalty of not more than $10,000 for each such violation involved. Information provided under the Act is intended to be used solely with respect to activities in the furtherance of the quality of medical care. (sec. 11137)