Tennessee Code Title 47. Commercial Instruments and Transactions § 47-18-3003

(1) A person who willfully and knowingly uses, causes to be used, obtains, sells, transfers, or discloses protected health information in violation of this section commits a Class A misdemeanor, punishable by a fine of one thousand dollars ($1,000), imprisonment, or both; and

(2) A person who violates this section with the intent to use, cause to be used, obtain, sell, transfer, or disclose protected health information for the purpose of financial gain commits a Class C felony, punishable by a fine not to exceed two hundred fifty thousand dollars ($250,000), imprisonment of not less than three (3) years nor more than ten (10) years, or both.