(a) A person shall not use, cause to be used, obtain, sell, transfer, or disclose protected health information to another person for the purpose of soliciting an individual for legal services without written authorization from the individual who is the subject of the information.(b) In addition to any other remedy provided by law: (1) A person who willfully and knowingly uses, causes to be used, obtains, sells, transfers, or discloses protected health information in violation of this section commits a Class A misdemeanor, punishable by a fine of one thousand dollars ($1,000), imprisonment, or both; and(2) A person who violates this section with the intent to use, cause to be used, obtain, sell, transfer, or disclose protected health information for the purpose of financial gain commits a Class C felony, punishable by a fine not to exceed two hundred fifty thousand dollars ($250,000), imprisonment of not less than three (3) years nor more than ten (10) years, or both.(c) This section does not apply to the use or disclosure of protected health information to an individual's legal representative in the course of any judicial or administrative proceeding, or as otherwise permitted or oes not apply to the use or disclosure of protected health information to an individual's legal representative in the course of any judicial or administrative proceeding, or as otherwise permitted or required by law.Acts 2019, ch. 119, § 1.
Tennessee Legal Code