The Program shall make available the information technology necessary for dispensers to report prescription monitoring data and naloxone medication data to the Program. The Program may not impose any fees or other assessments on prescribers or dispensers to support the operation of the Program. A prescriber or pharmacist, when acting in good faith, is not subject to liability or disciplinary action arising solely from: Requesting or receiving prescription monitoring data from the Program; or Acting, or failing to act, on the basis of prescription monitoring data provided by the Program. Redisclosure of Prescription Monitoring Data. Prescription monitoring data received under Health-General Article, §21-2A-06, Annotated Code of Maryland, and Regulation .05 of this chapter may be redisclosed only: In a manner consistent with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C. §1320d et seq., as amended, and all other State and federal laws and regulations governing the security and confidentiality of protected health information and personal medical records; or For entities to which the Program has disclosed data, in furtherance of an existing, bona fide, individual investigation to another agency cooperating with or providing support to the original data. The release of prescription monitoring data by a prescriber or pharmacist to a licensed health care professional solely for treatment purposes in a manner otherwise consistent with State and federal law is not a violation of Health-General Article, Title 21, Subtitle 2A, Annotated Code of Maryland. Redisclosure of Naloxone Medication Data. Naloxone medication data received under Health-General Article, §21-2A-6.1, Annotated Code of Maryland, and Regulation .05-1 of this chapter may be redisclosed only in a manner consistent with the Health Insurance Portability and Accountability Act of 1996 (HIPAA), 42 U.S.C. §1320d et seq., as amended, and all other State and federal laws and regulations governing the security and confidentiality of protected health information and personal medical records. The Program shall retain prescription monitoring data and naloxone medication data for 5 years from the date of receipt. A member of the Technical Advisory Committee: Shall serve for a term of 3 years from the date of appointment; and May be reappointed at the discretion of the Secretary.