Wrongful disclosure of individually identifiable health information

uses or causes to be used a unique health identifier; obtains individually identifiable health information relating to an individual; or discloses individually identifiable health information to another person, be fined not more than $50,000, imprisoned not more than 1 year, or both; if the offense is committed under false pretenses, be fined not more than $100,000, imprisoned not more than 5 years, or both; and if the offense is committed with intent to sell, transfer, or use individually identifiable health information for commercial advantage, personal gain, or malicious harm, be fined not more than $250,000, imprisoned not more than 10 years, or both. A person who knowingly and in violation of this part— A person described in subsection (a) shall— (Source: (Aug. 14, 1935, ch. 531, title XI, § 1177, as added Pub. L. 104–191, title II, § 262(a), Aug. 21, 1996, 110 Stat. 2029; amended Pub. L. 111–5, div. A, title XIII, § 13409, Feb. 17, 2009, 123 Stat. 271.))