Such auditor shall maintain the confidentiality of any public records that are confidential or exempt from the provisions of subsection (1) and shall be subject to the same penalties as the custodians of those public records for violating confidentiality. (7)(a) Any person or organization, including the Department of Health and Rehabilitative Services, may petition the court for an order making pu