(a)
(1) Any person, firm, corporation, organization, or institution that violates any of the provisions of this subchapter or any rules promulgated under this subchapter regarding confidentiality of information shall be guilty of a Class C misdemeanor.
(2) Each day of violation shall constitute a separate offense.
(b) Any person, firm, corporation, organization, or institution knowingly violating any of the provisions of this subchapter or any rules promulgated under this subchapter shall be guilty of a violation and upon conviction shall be punished by a fine of not more than five hundred dollars ($500).
(c)
(1) Every person, firm, corporation, organization, or institution that violates any of the rules adopted by the State Board of Health or that violates any provision of this subchapter may be assessed a civil penalty by the board.
(2) The civil penalty shall not exceed two hundred fifty dollars ($250) for each violation.
(3) However, no civil penalty may be assessed until the person charged with the violation has been given the opportunity for a hearing on the violation pursuant to the Arkansas Administrative Procedure Act, § 25-15-201 et seq.