Request sought number of medical marijuana certifications issued by a particular provider during various timeframes and data from the certifications with patient info de-identified. Agency did not prove that Items 1-3 seek certifications that are protected by the Medical Marijuana Act and that it is aggregate data. The Agency did prove that Item 4 seeks individual patient data. Granted in part and denied in part.