(a) In addition to any other penalty provided by law, any employee, financial backer, operator or principal who discloses, except to authorized persons for official governmental or health care purposes, any information related to the use of medical cannabis:
(1) A medical cannabis organization.
(2) A health care medical cannabis organization or university participating in a research study under article thirteen of this chapter.
(3) A clinical registrant or academic clinical research center under article fourteen of this chapter.
(4) An employee of the bureau.
(b) Exception. — Subsection (a) of this section shall not apply where disclosure is permitted or required by law or by court order.