(1) Any person receiving information containing the personal identity of any patient, who willfully divulges that identity, except as lawfully provided for in this chapter, commits a Class C misdemeanor.
(2) It is the duty of the district attorney general to prosecute a suit, based on subsection (a), when requested by the commissioner, the county health officer or local board of health.