The operator shall keep confidential and make available only to authorized persons all medical, social, personal and financial information relating to each registrant.