The Secretary of the Department of Health may release data collected under this subchapter, except that data released shall not include any information which identifies or could be used to identify any individual patient, provider, institution, or health plan except as provided in § 20-7-305.