42 CFR § 480.108
Penalties for unauthorized disclosure
June 11, 2020
A person who discloses information not authorized under Title XI Part B of the Act or the regulations of this part will, upon conviction, be fined no more than $1,000, or be imprisoned for no more than six months, or both, and will pay the costs of prosecution.