58-37f-601. Unlawful release or use of database information -- Criminal and civil penalties.
(1) Any person who knowingly and intentionally releases: any information in the database or any information obtained from other state or federal prescription monitoring programs by means of the database in violation of the limitations under, is guilty of a third degree felony; or Part 3, Access and Utilization any information in the database accessed under Sectionby an electronic data system, or accessed by a person via an electronic data system, in violation of rules established by the division under Subsectionis guilty of a third degree felony. 58-37f-303 58-37f-303(4) Any person who negligently or recklessly releases: any information in the database or any information obtained from other state or federal prescription monitoring programs by means of the database in violation of the limitations under, is guilty of a class C misdemeanor; or Part 3, Access and Utilization any information in the database accessed under Sectionby an electronic data system, or accessed by a person via an electronic data system, in violation of rules established by the division under Subsectionis guilty of a class C misdemeanor. 58-37f-303 58-37f-303(4)
(2) Any person who obtains or attempts to obtain the following by misrepresentation or fraud is guilty of a third degree felony: information from the database; information from any other state or federal prescription monitoring program by means of the database; or information from the database or any other state or federal prescription monitoring program via an electronic data system under Section. 58-37f-303 Any person who obtains or attempts to obtain information from the database, including via an electronic data system under Sectionthat has access to the database, for a purpose other than a purpose authorized by this chapter or by rule is guilty of a third degree felony. 58-37f-303
(3) Except as provided in Subsection, a person may not knowingly and intentionally use, release, publish, or otherwise make available to any other person the following information for any purpose other than those specified in: (3)(e) Part 3, Access and Utilization information obtained from the database; information obtained from any other state or federal prescription monitoring program by means of the database; or information in the database accessed under Sectionby: 58-37f-303 an electronic data system; or a person via an electronic data system. Each separate violation of this Subsectionis a third degree felony and is also subject to a civil penalty not to exceed $5,000. (3) The procedure for determining a civil violation of this Subsectionis in accordance with Section, regarding adjudicative proceedings within the division. (3) 58-1-108 Civil penalties assessed under this Subsectionshall be deposited in the General Fund as a dedicated credit to be used by the division under Subsection. (3) 58-37f-502(1) This Subsectiondoes not prohibit a person who obtains information from the database under Subsection(h), (i), (k), or (4)(c) from: (3) 58-37f-301(2) including the information in the person's medical chart or file for access by a person authorized to review the medical chart or file; or providing the information to a person in accordance with the requirements of the Health Insurance Portability and Accountability Act of 1996.