4. a. Within two years after the effective date of this act, the Department of Health shall establish and maintain a new database, or update an existing database, that contains a confidential record of all data obtained pursuant to section 3 of this act, except that if the department develops the technical capability, the department shall establish and maintain the new, or update the existing, database prior to the two years after the effective date of this act.
b. The data shall be made available to the public through the department website, except that no data shall identify any person to whom the data relate.