Violation -- Penalty.

(1) Any individual or entity entitled to receive confidential information from the department or a local health department under Sections 26B-7-201 through 26B-7-223, other than the individual identified in that information, who violates Sections 26B-7-201 through 26B-7-223 by releasing or making public confidential information, or by otherwise breaching the confidentiality requirements of Sections 26B-7-201 through 26B-7-223, is guilty of a class B misdemeanor. (2) Sections 26B-7-201 through 26B-7-223 do not apply to any individual or entity that holds or receives information relating to an individual who has or is suspected of having a disease designated by the department as a communicable or reportable disease under Sections 26B-7-201 through 26B-7-223, if that individual or entity has obtained the information from a source other than the department or a local health department.