Any person obtaining information under subsection (a) or (c) shall, in accordance with such subsection (a) or (c), be required to agree in a written confidentiality agreement that he will not use the information for any purpose other than the health needs asserted in the statement of need, except as may otherwise be authorized by the terms of the agreement or by the person providing such information. Nothing in this subsection shall preclude the parties to a confidentiality agreement from pursuing any remedies to the extent permitted by law.
As soon as practicable after October 17, 1986, the Administrator shall promulgate regulations describing criteria and parameters for the statement of need under subsection [1] (a) and (c) and the confidentiality agreement under subsection (d).