(a) any negligent disclosure of an HIV test to any third party that provides personal identifying information without written consent or within exceptions, shall be assessed a civil penalty of not more than $2500 and court costs. (b) Any willful or malicious disclosure shall be assessed a civil penalty of $5000 to $10,000 plus court costs.
The Director of the Department of Managed Health Care may suspend or revoke any license issued to a health care service plan or assess administrative penalties if the licensee has committed any of the acts or omissions constituting grounds for disciplinary action, including (1) violating the Confidentiality of Medical Information Act or (2) violating the legal requirements for post-stabilization care, which includes providing relevant information reasonably necessary for the health care service plan to authorize post-stabilization care or assume management of the patient's care by prompt trans