(a) any negligent disclosure of an HIV test to any third party that provides personal identifying information without written consent or within exceptions, shall be assessed a civil penalty of not more than $2500 and court costs. (b) Any willful or malicious disclosure shall be assessed a civil penalty of $5000 to $10,000 plus court costs.