Va. Code Ann. § 32.1-73.25

In addition to the remedies provided in § 32.1-27, any person who uses, discloses, or releases data maintained in the statewide sickle cell disease registry in violation of § 32.1-73.24 shall be subject, in the discretion of the court, to a civil penalty not to exceed $25,000 for each violation, which shall be paid to the general fund.