Pennsylvania Statutes Title 35 P.S. Health and Safety § 10231.1307. Disclosure of information prohibited

(a) Offense defined.--In addition to any other penalty provided by law, an employee, financial backer, operator or principal of any of the following commits a misdemeanor of the third degree if the person discloses, except to authorized persons for official governmental or health care purposes, any information related to the use of medical marijuana:

(b) Exception.--Subsection (a) shall not apply where disclosure is permitted or required by law or by court order.  The department, including an authorized employee, requesting or obtaining information under this act shall not be subject to any criminal liability.  The immunity provided by this subsection shall not apply to any employee of the department who knowingly and willfully discloses prohibited information under this act.