Any vendor or employee of a vendor who knowingly furnishes a record or information obtained from a record to a person who is not authorized by law to receive the record or information shall be guilty of a misdemeanor and fined not more than five thousand dollars ($5,000), or imprisoned in a county jail for not more than one year, or both.
Source:
Section 11149.3, https://leginfo.legislature.ca.gov/faces/codes_displaySection.xhtml?lawCode=PEN§ionNum=11149.3..