Va. Code Ann. § 32.1-71.01

In addition to the remedies provided in § 32.1-27, any person who uses, discloses or releases data maintained in the statewide cancer registry in violation of § 32.1-71 shall be subject, in the discretion of the court, to a civil penalty not to exceed $25,000 for each violation, which shall be paid to the general fund.