(a)      (1)      Each confidential record shall remain in the custody and control of:

                  (i)      The Drug Abuse Administration, if that Administration assembled or obtained the confidential record;

                  (ii)      The AIDS Administration, if that Administration assembled or obtained the confidential record; or

                  (iii)      The Secretary or an agent or employee of the Secretary, if the Secretary assembled or obtained the confidential record.

            (2)      The confidential record may be used only for the research and study for which it was assembled or obtained.

            (3)      A person may not disclose any confidential record to any person who is not engaged in the research or study project.

      (b)      This section does not apply to or restrict the use or publication of any statistics, information, or other material that summarizes or refers to confidential records in the aggregate, without disclosing the identity of any person who is the subject of the confidential record.