Penalties.

(1) Any use, release, or publication of health care data contrary to the provisions of Sections 26B-8-507 and 26B-8-508 is a class A misdemeanor. (2) Subsection (1) does not relieve the person or organization responsible for that use, release, or publication from civil liability.