We are called upon in this appeal to construe certain provisions of the Maryland Confidentiality of Medical Records Act, codified, in relevant part, as Maryland Code (1982 Repl. Vol., 1997 Supp.), §§ 4-301 through 4-309 of the Health-General Article.1 Petitioner, William Warner, claims that respondent, Brad Lerner, violated his rights under the Act by obtaining one of his medical records from Union Memorial Hospital in a manner and for a purpose not allowed by the Act. The Circuit Court for Baltimore City, by granting Ler*735ner’s motion to dismiss, found that Lerner’s conduct did not constitute a violation of the Act, and, in a reported opinion, the Court of Special Appeals affirmed that judgment. Warner v. Lerner, 115 Md.App. 428, 693 A.2d 394 (1997). We shall reverse.
FACTUAL BACKGROUND
Because the issue before us arises from the granting of a motion to dismiss the complaint, we must assume as fact the well-pleaded material allegations in the complaint and any reasonable inferences that may be drawn from them. Flaherty v. Weinberg, 303 Md. 116, 135-36, 492 A.2d 618, 628 (1985). We must look, then, to what is alleged in the complaint.
Warner was a patient of Dr. Horst Schirmer, a urologist. He was treated by Dr. Schirmer for urinary/genito problems in 1992 and, in the course of that treatment, disclosed personal information to Dr. Schirmer with the understanding that the information was confidential. By necessary implication, though not by express averment, it appears that medical records concerning Warner and the treatment by Dr. Schirmer became part of the medical records of Union Memorial Hospital.
Lerner is also a urologist having privileges at Union Memorial Hospital. In 1993, Leo Kelly, a patient of both Lerner and Schirmer, sued Lerner for malpractice. By agreement, Lerner and Kelly submitted their dispute to retired Judge Hilary Caplan, as a “binding mediator.”2 Dr. Schirmer had *736been retained as an expert witness by Mr. Kelly, and he was called to testify before Judge Caplan. The complaint alleges:
“11. In an effort to discredit Dr. Schirmer’s testimony, the Defendant Lerner wrongfully, willfully and in violation of [§ 4-302] obtained the Plaintiff William S. Warner’s urological record from the medical records of Union Memorial Hospital and furnished this wrongfully obtained confidential data to his attorney....
12. Cross-examination of Dr. Schirmer included public disclosure of the Plaintiffs past urological history and treatment and made public confidential data, which the Plaintiff never authorized and would not have authorized, as it contains intimate and personal information regarding his urological status.
14. The Plaintiff alleges that the violation of the Maryland Statute by the Defendant Lerner was a willful and intentional. act as was the disclosure of such data at a public hearing and/or to third persons not authorized by the Plaintiff.”
Lerner moved to dismiss the complaint on the grounds that (1) the complaint failed to show a violation of the statute, (2) the disclosure was permissible under §§ 4-305 and 4-309, and (3) the disclosure during the arbitration proceeding was, in any event, absolutely privileged. In a memorandum in support of that motion, Lerner acknowledged that “[i]n preparation for the arbitration of the Kelly case, the defendant and his lawyer obtained a copy of a pathology report from an operation performed by Dr. Schirmer to demonstrate that Dr. *737Schirmer’s testimony was untrue. The pathology report obtained was Mr. Warner’s.”
The complaint does not allege precisely how Lerner obtained the pathology report from Union Memorial’s records. It seems implicit from the argument made both in the circuit court and in this Court that, rather than physically rummaging through the actual records, Lerner obtained the report through the Union Memorial Hospital computer system. From the allegation that he obtained the report “wrongfully” and “in violation of the above statute,” it is also implicitly alleged that he obtained it without requesting or receiving permission from Union Memorial, from Dr. Schirmer, or from Mr. Warner.
Although, as noted, three grounds were raised in Lerner’s motion to dismiss, the court acted on the basis of only one of them. It concluded that Lerner’s obtention and disclosure of the report was authorized under § 4-305(b)(l)(iii), permitting a health care provider to disclose a medical record without the authorization of a person in interest (which includes the patient to whom the record pertains) “[t]o any provider’s insurer or legal counsel ... for the sole purpose of handling a potential or actual claim against any provider.” That section, the court reasoned, “gave the defendant the opportunity to obtain this information and use it to defend a lawsuit that everyone acknowledges was pending against him.” The court expressed its concern that “no effort was made to subpoena the records and give notice to the patient that his records were being made public” and as well that Mr. Warner “did not have free opportunity to contest the disclosure of his records and that a court of competent jurisdiction was not afforded an opportunity to consider the issue and perhaps craft a protective order.” It felt bound, however, by its view of the law allowing “any provider” to obtain “any record” of “any patient” to defend a malpractice suit against the provider.
The Court of Special Appeals articulated similar concerns, but nonetheless agreed with the circuit court’s interpretation of § 4—305(b)(l)(iii) as permitting “Lerner, through his coun*738sel, to obtain Warner’s medical records without his prior consent or authorization.” Warner v. Lerner, supra, 115 Md.App. at 433, 693 A.2d at 396.
DISCUSSION
Section 3-301 defines certain terms for purposes of the Act. It is undisputed that, under those definitions, Union Memorial Hospital and Lerner are health care providers, Warner is a patient and person in interest, and the pathology report admittedly obtained by Lerner is a medical record pertaining to Warner. Section 4-302(a) states, in general, that a health care provider shall (1) keep the medical record of a patient confidential, and (2) disclose the medical record only as provided by law. Subsection (b) exempts certain kinds of information from the ambit of the Act, but neither party suggests that any of those exemptions apply to the record at issue here. Section 4-303 requires a health care provider to disclose a medical record on the authorization of a person in interest, subject to conditions stated in that section. It is undisputed, at this point, that neither Lerner nor Union Memorial had the authorization of a person in interest to have the pathology report disclosed (1) to Lerner, or (2) by Lerner to his attorney.
Section 4-306 requires a health care provider to disclose a medical record, without authorization of a person in interest, in six enumerated circumstances, none of which apply here. One provision of § 4-306 that is relevant, by way of contrast, is subsection (a)(3), requiring the disclosure “[t]o a health care provider or the provider’s insurer or legal counsel, [of] all information in a medical record relating to a patient or recipient’s health, health care, or treatment which forms the basis for the issues of a claim in a civil action initiated by the patient, recipient, or person in interest.” (Emphasis added.) Had Mr. Warner been the claimant and had the pathology report been pertinent to that claim, the hospital, upon request, may have been obliged to disclose the report. That, of course, was not the case; Mr. Warner had made no claim against *739anyone, least of all a health care provider. Section 4-306(a)(6) requires the disclosure of a medical record “Lijn accordance with compulsory process, a stipulation by a patient or person in interest, or a discovery request permitted by law to be made to a court, an administrative tribunal, or a party to a civil court, administrative, or health claims arbitration proceeding.” As noted by the circuit court, the pathology report was not obtained or disclosed pursuant to any of those processes.
We turn, then, to § 4-305, which, in contrast to § 4-306, is a permissive disclosure provision. Indeed, § 4-305(a) expressly provides that “[t]his section may not be construed to impose an obligation on a health care provider to disclose a medical record.” Subsection (b) then lists nine circumstances under which a health care provider “may disclose a medical record without the authorization of a person in interest.” (Emphasis added.) One of those circumstances, § 4—305(b)(l)(iii) is “[t]o any provider’s insurer or legal counsel, or the authorized employees or agents of a provider’s insurer or legal counsel, for the sole purpose of handling a potential or actual claim against any provider.” That is the provision that was declared applicable by the two lower courts. They each focused on the general adjective “any” as allowing disclosure to Lerner’s attorney, as the legal counsel for “any provider.”
The fundamental flaw in that approach is that, under the alleged facts of this case, it matters not whether the word “any” is given an expansive or restrictive meaning, for § 4-805(b) itself has no application. That section deals with when a health care provider in possession of medical records is allowed, in its discretion, to disclose them without the authorization of the patient. The health care provider in question was Union Memorial Hospital, not Lerner. The pathology report was in the possession of the hospital, not Lerner. Accordingly, even if the lower courts’ reading of § 4-3G5(b)(l)(iii) were correct, that provision would do no more than authorize Union Memorial Hospital to disclose the rec*740ords to Lerner’s attorney.3 Apart from the omission of the provision to allow disclosure to Lerner himself, the telling fact overlooked below is that, by obtaining the report entirely on his own, Lerner never allowed Union Memorial to exercise its discretion.
As noted, in contrast to § 4-306, even under the expansive reading given by the lower courts, Union Memorial was not required, to disclose Mr. Warner’s records to Lerner’s attorney, but would merely have been permitted to do so. Under the circumstances of this case, it may well have opted not to disclose, at least without first consulting Mr. Warner or Dr. Schirmer. It may have elected to disclose some parts of the record but not others. It may have insisted on a subpoena. It may have put other conditions on a disclosure. As a result of Lerner’s alleged self-help approach, the hospital never had an opportunity to do any of those things. We find nothing in § 4-305(b)(l)(iii), or any other provision of § 4-305, authorizing Lerner, who, notwithstanding his possible status as a provider nonetheless was a complete stranger to Warner, to have access and to obtain Warner’s medical records without the consent of Union Memorial.
That brings us to § 4-309, subsection (b) of which makes it a violation of the subtitle for a health care provider or any other person to obtain a medical record under false *741pretenses or through deception. Section 4~309(d) adds that a health care provider or other person who knowingly violates any provision of the subtitle is liable for actual damages. In his complaint, Warner has charged that Lerner obtained the report from Union Memorial’s medical records “wrongfully, willfully and in violation of the above statute.” Coupled with the factual allegations in the complaint, that suffices, in our view, as an allegation that he obtained the record knowingly under false pretenses or through deception. Lerner may, perhaps, be able to show, as a matter of fact, that, by virtue of some Union Memorial policy, he had permission from the hospital to obtain Mr. Warner’s records for use in defending the malpractice action brought by Mr. Kelly, in which event his obtention of the report might not be by false pretense or deception. Implicit in Warner’s allegations, however, is the contrary. We hold, therefore, that the Court of Special Appeals erred in affirming the judgment of the circuit court.
JUDGMENT OF COURT OF SPECIAL APPEALS REVERSED; CASE REMANDED WITH INSTRUCTIONS TO REVERSE JUDGMENT OF CIRCUIT COURT AND REMAND FOR FURTHER PROCEEDINGS; COSTS IN THIS COURT AND COURT OF SPECIAL APPEALS TO BE PAID BY RESPONDENT.
Concurring opinion by RAKER, J.
. All future statutory references will be to the Health-General Article.
. It appears from other parts of the record that, in reality. Judge Caplan was acting as an arbitrator, not as a mediator. An affidavit from Lerner's attorney states that "[t]he action was submitted to binding arbitration pursuant to an agreement of the parties.” Attached to the affidavit is a letter from Kelly’s lawyer confirming an agreement "to submit to binding arbitration of this matter before Judge Hilary Ca-plan.” The circuit court, in this case, found that the proceeding before Judge Caplan was an arbitration. Apart from all of that, we are unaware of anyone having the authority to act as a "binding mediator.” Mediation is a conciliative process in which a mediator assists the parties in reaching their own solution or agreement. A mediator has no authority to impose a solution or adjudicate the dispute. Even in a *736court-annexed program, where the parties may be required by a court to submit to mediation, they are not required to reach an agreement and the mediator has no authority to bind them to one. Occasionally, a neutral person will be asked to attempt first to mediate a dispute and, failing that, to adjudicate it—a process sometimes referred to as "med/arb”—but, in such a proceeding, the neutral party will necessarily be acting as an arbitrator, not as a mediator, when making the adjudication. It is important that these very different processes not become confused.
. It is noteworthy that § 4-305(b)(l)(iii), while authorizing disclosure to "any provider’s insurer or legal counsel,” does not authorize disclosure to the provider. That may well be an indication that the provision was intended to be restricted to the situation in which the possessor of the medical records, or perhaps an employee or agent of that possessor, is the provider being sued, for only in that setting would the "provider” have no need to have the records disclosed to it. The possessor and its employees and agents would already have access to the records; the need, in that setting, would only be to enable the provider to disclose the records to their insurers or attorneys. When the provider being sued is someone else, not having legitimate access to the medical records, it would seem anomalous to permit disclosure to the provider’s insurer or attorneys but not to the provider. For the reasons noted, we need not decide in this case whether § 4-305(b)(l)(iii) should be read to permit Union Memorial Hospital to disclose to a provider's insurer or attorney the medical record of someone who was not a patient of the provider.