If any person, including an employee or official of the department of health or another state agency or local government, breaches the confidentiality of information on this list, they can be punished by up to one hundred eighty days in jail and a $1,000 fine.