Private review agents who have been granted a certificate of registration by the Department shall have reasonable access to patient-specific medical records and information to the extent and in the manner authorized by regulation.