(a)      A person who, by virtue of employment or official position, has possession of or access to individually identifiable DNA information contained in the statewide DNA data base system or statewide DNA repository may not willfully disclose the information in any manner to a person or agency not entitled to receive the information.

      (b)      A person may not, without authorization, willfully obtain individually identifiable DNA information from the statewide DNA data base system or statewide DNA repository.

      (c)      A person who violates this section is guilty of a misdemeanor and on conviction is subject to imprisonment not exceeding 3 years or a fine not exceeding $1,000 or both.