Prescription drugs.

(1) The of Medical Information Act prohibits a provider of health care, a health care service plan, contractor, or corporation and its subsidiaries and affiliates from intentionally sharing, selling, using for marketing, or otherwise using any medical information, as defined, for any purpose not necessary to provide health care services to a patient, except as expressly authorized by the patient, enrollee, or subscriber, as specified, or as otherwise required or authorized by law. Violations of these provisions are subject to a civil action for compensatory and punitive damages, and, if a violation results in economic loss or personal injury to a patient, it is punishable as a misdemeanor.