(a) The willful, unauthorized disclosure of information obtained from the department pursuant to Section 2265 to any person, or the use of any false representation to obtain any of that information or the use of any of that information for a purpose other than as stated in Section 2265, is a misdemeanor punishable by a fine not exceeding five thousand dollars ($5,000) or imprisonment in the county jail not exceeding one year, or both fine and imprisonment.
(b) The Secretary of State shall establish procedures to protect the confidentiality of the information acquired from the department pursuant to Section 2265. The disclosure of this information shall be governed by the Information Practices Act of 1977 (Chapter 1 (commencing with Section 1798) of Title 1.8 of Part 4 of Division 3 of the Civil Code), and the Secretary of State shall account for any disclosures, including those due to security breaches, in accordance with that act.