C.R.S. § 25-4-414

(1) A health-care provider, laboratory employee, or other person who is required to make a report pursuant to section 25-4-405 and who fails to make such a report commits a civil infraction and, upon conviction, shall be punished by a fine of one hundred dollars. (2) A health-care provider, officer or employee of the state department, officer or employee of a local public health agency, or person, firm, or corporation that violates section 25-4-406 by breaching the confidentiality requirements of such section commits a class 2 misdemeanor.