All documentation on a medical cannabis patient or primary caregiver shall be kept confidential. For purposes of program monitoring and compliance review, the department shall have full access to any and all records held by the medical cannabis organization relative to any and all qualified patients as well as any and all primary caregivers who have applied for, received and/or have been denied identification under the provisions of this chapter. Neither the organization nor the department shall disclose any identifying information from the organization’ s records without the express, written consent of the qualified patient or primary caregiver or without a court order directing the organization or department to do so. (Ord. 2003-53 § 1 (part))