Discovery of confidential information from a person subject to this subchapter under subpoena or other legal process must comply with rules adopted under this subtitle. The rules may:
(1) restrict release of confidential information to the portion directly relevant to the legal dispute at issue; and
(2) require that a protective order, in the form and under circumstances specified by the rules, be issued by a court before release of the confidential information.