The Secretary, in consultation with the Board, shall adopt regulations to carry out this subtitle. The regulations adopted by the Secretary shall: Specify the prescription monitoring data and naloxone medication data required to be submitted under § 21–2A–03 of this subtitle; Specify the electronic or other means by which information is to be submitted: Without unduly increasing the workload and expense on dispensers; and In a manner as compatible as possible with existing data submission practices of dispensers; Specify that the information be submitted by dispensers once every 24 hours; Specify that the Program: Shall provide the information technology software to dispensers necessary to upload prescription drug monitoring data and naloxone medication data to the Program; and May not impose any fees or other assessments on prescribers or dispensers to support the operation of the Program; Identify the mechanism by which: Prescription monitoring data are disclosed to a person, in accordance with § 21–2A–06 of this subtitle; and Naloxone medication data are disclosed to a person, in accordance with § 21–2A–06.1 of this subtitle; Identify the circumstances under which a person may disclose prescription monitoring data or naloxone medication data received under the Program; Specify the process for the Program’s review of prescription monitoring data and naloxone medication data and reporting of: Possible misuse or abuse of a monitored prescription drug under § 21–2A–06(c) of this subtitle; or A possible violation of law or possible breach of professional standards under § 21–2A–06(d) of this subtitle; Establish requirements for Program retention of prescription monitoring data and naloxone medication data; and Require that: Confidential or privileged patient information be kept confidential; and Records or information protected by a privilege between a health care provider and a patient, or otherwise required by law to be held confidential, be filed in a manner that, except as otherwise provided in §§ 21–2A–06 and 21–2A–06.1 of this subtitle, does not disclose the identity of the person protected.