50-16-551. Criminal penalty. (1) A person who by means of bribery, theft, or misrepresentation of identity, purpose of use, or entitlement to the information examines or obtains, in violation of this part, health care information maintained by a health care provider is guilty of a misdemeanor and upon conviction is punishable by a fine not exceeding $10,000 or imprisonment for a period not exceeding 1 year, or both.

(2) A person who, knowing that a certification under 50-16-536(2) or a disclosure authorization under 50-16-526 and 50-16-527 is false, purposely presents the certification or disclosure authorization to a health care provider is guilty of a misdemeanor and upon conviction is punishable by a fine not exceeding $10,000 or imprisonment for a period not exceeding 1 year, or both.