Except as provided in subsection (b) of this section, the Secretary shall deny access to any business–related information concerning any person who applies for a certificate or is certified under this subtitle. If the Secretary determines that disclosure is necessary to protect the public health, the Secretary may disclose any business–related information concerning any person who applies for a certificate or is certified under this subtitle.