Tenn. Code Ann. § 68-1-1009: Violations — Penalties — Enforcement.

(a) Any person receiving information containing the personal identity of any patient, who willfully divulges that identity, except as lawfully provided for in this chapter, commits a Class C misdemeanor.

(b) It is the duty of the district attorney general to prosecute a suit, based on subsection (a), when requested by the commissioner, the county health officer or local board of health.